last executing test programs:

37.47574891s ago: executing program 2 (id=11):
r0 = syz_create_resource$futex(&(0x7f0000000100)=0x200001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
futex(r0, 0x85, 0x8, 0x0, r0, 0x40000000)

36.277737557s ago: executing program 2 (id=23):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)

35.833588965s ago: executing program 2 (id=27):
r0 = socket(0x1, 0x5, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x6000)
setresuid(0xee01, r1, r1)
ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe}})

35.64030519s ago: executing program 2 (id=29):
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1400c, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@init_itable}, {@norecovery}]}, 0x3, 0x475, &(0x7f0000000240)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000006840)='./bus\x00', 0xe1c00, 0x0, 0x2, 0x0, &(0x7f0000006880))
mount$overlay(0x0, &(0x7f0000006980)='./file0\x00', &(0x7f00000069c0), 0x8, &(0x7f0000006a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

34.63278896s ago: executing program 2 (id=36):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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")
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\\\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

33.673953618s ago: executing program 2 (id=46):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r1})

33.227187311s ago: executing program 32 (id=46):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r1})

5.044404752s ago: executing program 4 (id=336):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000001a80)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,\x00\x00\x00\x00\x00\x00', @ANYBLOB="f9ee7ee6616006527905abd668ea17e382e0c83dc34879c344093674bfcb9afe6942e93d2c31ef3422c5857ce514a621738e2e0ca9f3b51f9577ee83ca37bd7a2dda7be50c9438a6731ec6303c2b70c0282527857939030300203de5ad9ccf10f399d47a553c3815a8140e156f525b62a6c34f36a440f37ac333648bccb6c848db175245696642c3000000000000", @ANYRES32, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX], 0x1, 0x151f, &(0x7f0000000440)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)

4.598357595s ago: executing program 4 (id=340):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000380)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24)

4.28835414s ago: executing program 4 (id=345):
r0 = socket(0x1d, 0x2, 0x6)
r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000040)={0x2e, 0x32, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x33f81df2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0))
setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc)

4.085028801s ago: executing program 4 (id=349):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfe, 0x590, &(0x7f0000000a40)="$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")
getrandom(&(0x7f0000000700)=""/300, 0xcebaa945, 0x0)
mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0)
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0x0, &(0x7f00000009c0)={0x8, 0x5925091c, 0x9a4f357f197a1a1f, 0x4})

3.043432159s ago: executing program 5 (id=356):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000180)=[{0x52, 0x7400, 0x0, 0x0}], 0x1})

2.74936231s ago: executing program 4 (id=362):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./bus\x00', 0x800000, &(0x7f0000005e00)=ANY=[@ANYBLOB="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"/452], 0x1, 0x5516, &(0x7f00000006c0)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0)

2.698489539s ago: executing program 3 (id=363):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x4010, &(0x7f0000000080)={[{}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0xfe, 0x459, &(0x7f0000000ac0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001400)=@v2={0x2, @aes128, 0x4, '\x00', @d})

2.268859227s ago: executing program 3 (id=366):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0)

1.96710479s ago: executing program 3 (id=369):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0)
write(r0, &(0x7f0000000080)="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", 0xfe)

1.873054628s ago: executing program 3 (id=370):
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000000680)="02155e65", 0x4, 0x2)

1.855655273s ago: executing program 1 (id=371):
r0 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0)
ftruncate(r0, 0x51a9497)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)

1.771028038s ago: executing program 3 (id=372):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@my=0x0})

1.687171595s ago: executing program 3 (id=373):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4000, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080), 0x20000328)

1.451338522s ago: executing program 1 (id=374):
r0 = epoll_create1(0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x10002, 0x8f, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
epoll_pwait(r0, &(0x7f0000000a40)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000a80)={0xe0000001})

1.356432349s ago: executing program 0 (id=375):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001ac0)='./file0\x00', 0x0, 0x34)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0xa240, 0x1c9)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file2\x00', 0x0)

1.316722965s ago: executing program 5 (id=376):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001400)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x5, @empty, 0x6}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

1.158150374s ago: executing program 5 (id=377):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0)
write(r0, &(0x7f0000000540)="6b657941206b6579422032303030303030303030203088", 0x17)

1.062143802s ago: executing program 1 (id=378):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10)

1.012213977s ago: executing program 0 (id=379):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={<r1=>0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000400)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r1, @in={{0x2, 0x0, @empty}}, 0x4, 0xfffd, 0x0, 0xb, 0xce03b1}, 0x9c)

940.091555ms ago: executing program 5 (id=380):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x8, 0xffbf, 0x6, 0x4, 0x18, "e26424b281065e9f"})
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="d929fb8ac9338bc5293b854f5d1fd2b548e7872a2bd5795405a9085696c200a1d1934f543d6d4210960993f3cf57638bc24df99d2ae385240e420d", 0x3b}], 0x1)

758.565941ms ago: executing program 1 (id=381):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x48c, 0x0, 0x4001}]})

702.951669ms ago: executing program 0 (id=382):
unshare(0x2a060400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603"], 0x60}, 0x1, 0x0, 0x0, 0x10004883}, 0x80)
recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40, &(0x7f0000003e00))

695.204896ms ago: executing program 5 (id=383):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000000580))
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x437, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10c8d}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5241}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)

423.416054ms ago: executing program 0 (id=384):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0xfffffc03)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

388.214955ms ago: executing program 4 (id=385):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pnp/devices/00:01/options\x00', 0x0, 0x0)
read(r0, &(0x7f0000000280)=""/256, 0x100)

357.257517ms ago: executing program 1 (id=386):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002080)=@newtaction={0x1fc, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x1e8, 0x1, [@m_simple={0x138, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0xa, 0x3, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, {0xf1, 0x6, "ebc6d23aaa5ba80d0f802173a723fcfa0cf2d0ebb06113a27802ae394942b641c58b2d19d2d38e2d3aefaedd845a777ce244c34529788bec9caea801696b43e73eba1d5f57253ded4007888d4dfb2d4d560cc3a21e5362d7322c39e51b110d62a241245060777b51d51b8fcc7955bce8eb39b61de1a07ec7afee370d347a3b49abb46b7a9f9ec6665756470dd6da3aea92b2edf57087696c04062aab4f6f9e50e211d5c76cc688c9cb720e5bdccf4bb3196cf0f75fb75876546c9e412aa7cc9df037ac35cc6aa024fd58553bae1e43269f38a1efa0e0313a62abf3b8f01c0ba4a79e663fa8d815b20f494bb056"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xac, 0x20, 0x0, 0x0, {{0x9}, {0x4}, {0x7d, 0x6, "d0c3fb11bc9dd3b47f33e5e6d12bb50f6a57347a7f9b7629da47d8ee88f4d6218eb1b26a9018717351f4ca9f8dffa2436a9d0ec89b83bdd5e401a5eeb464f35a58f17b5573089f0c1c6aa20867af78831b3700e94ade2ef87763459a4b6dd33d4f259ed29416baf90787baf9b6ede469abc3f6ade109f68261"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

341.865154ms ago: executing program 5 (id=387):
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semctl$GETZCNT(r0, 0x3, 0xf, 0x0)

249.766613ms ago: executing program 0 (id=388):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8)

40.506134ms ago: executing program 1 (id=389):
r0 = syz_create_resource$futex(&(0x7f0000000000)=0x1)
futex(r0, 0x9, 0x1, 0x0, 0x0, 0x1)
futex(r0, 0x9, 0x1, 0x0, r0, 0x2)
futex(r0, 0x5, 0x0, &(0x7f0000000300), r0, 0x1)

0s ago: executing program 0 (id=390):
syz_mount_image$ocfs2(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10040, &(0x7f0000000280)=ANY=[@ANYBLOB='heartbeat=none,journal_async_commit,journal_async_commit,coherency=full,coherency=full\x00'], 0x1, 0x4445, &(0x7f0000001200)="$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")
r0 = open(&(0x7f00000105c0)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
mknod$loop(&(0x7f0000010600)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0)

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   55.025279][ T5300] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.042407][ T5300] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts.
syzkaller login: [   76.111349][ T5627] cgroup: Unknown subsys name 'net'
[   76.222446][ T5627] cgroup: Unknown subsys name 'cpuset'
[   76.231533][ T5627] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   77.835250][ T5627] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   80.297633][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.302111][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.305759][ T5649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.307637][ T5652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.322170][ T5653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.322236][ T5652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.323497][ T5653] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   80.330169][ T5652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.331353][ T5652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.331742][ T5652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   80.339307][ T5652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.339822][ T5652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.340381][ T5652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.341427][ T5652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   80.349801][ T5652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.350757][ T5652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.351701][ T5652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.367890][ T5653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.368167][ T5652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   80.373270][ T5653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.375001][ T5653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.378778][ T5653] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   80.390065][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.390293][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.394730][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.469699][ T5637] rxe_eth0 speed is unknown, defaulting to 1000
[   81.473202][ T5637] rxe_eth0 speed is unknown, defaulting to 1000
[   81.491576][ T5640] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   81.494571][ T5639] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   81.509284][ T5637] rxe_eth0 speed is unknown, defaulting to 1000
[   81.519911][ T5645] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   81.524083][ T5638] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   81.920264][ T5637] infiniband rxe0: set active
[   81.921952][ T5637] infiniband rxe0: added rxe_eth0
[   81.975014][   T33] rxe_eth0 speed is unknown, defaulting to 1000
[   81.994096][ T5637] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   81.994136][ T5637] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   81.994179][ T5637] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   82.116019][ T5637] RDS/IB: rxe0: added
[   82.116508][ T5637] smc: adding ib device rxe0 with port count 1
[   82.134735][ T5637] smc:    ib device rxe0 port 1 has no pnetid
[   82.168258][   T33] rxe_eth0 speed is unknown, defaulting to 1000
[   82.194520][ T5637] rxe_eth0 speed is unknown, defaulting to 1000
[   82.427406][   T33] rxe_eth0 speed is unknown, defaulting to 1000
[   82.459186][ T4956] Bluetooth: hci2: command tx timeout
[   82.459488][ T5641] Bluetooth: hci4: command tx timeout
[   82.459560][ T4956] Bluetooth: hci1: command tx timeout
[   82.459969][ T5643] Bluetooth: hci3: command tx timeout
[   82.537987][ T5643] Bluetooth: hci0: command tx timeout
[   82.541407][   T33] rxe_eth0 speed is unknown, defaulting to 1000
[   82.663082][ T5637] rxe_eth0 speed is unknown, defaulting to 1000
[   83.001119][ T5637] rxe_eth0 speed is unknown, defaulting to 1000
[   83.016661][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.025012][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.025186][ T5640] bridge_slave_0: entered allmulticast mode
[   83.027223][ T5640] bridge_slave_0: entered promiscuous mode
[   83.117124][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.117246][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.134510][ T5640] bridge_slave_1: entered allmulticast mode
[   83.136450][ T5640] bridge_slave_1: entered promiscuous mode
[   83.171411][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.171589][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.171732][ T5645] bridge_slave_0: entered allmulticast mode
[   83.173468][ T5645] bridge_slave_0: entered promiscuous mode
[   83.180570][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.180850][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.181729][ T5645] bridge_slave_1: entered allmulticast mode
[   83.186056][ T5645] bridge_slave_1: entered promiscuous mode
[   83.318028][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.320541][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.320625][ T5637] rxe_eth0 speed is unknown, defaulting to 1000
[   83.323911][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.354366][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.354860][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.355178][ T5639] bridge_slave_0: entered allmulticast mode
[   83.359777][ T5639] bridge_slave_0: entered promiscuous mode
[   83.367289][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.367953][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.368975][ T5639] bridge_slave_1: entered allmulticast mode
[   83.370746][ T5639] bridge_slave_1: entered promiscuous mode
[   83.449437][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.503730][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.504218][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.504359][ T5638] bridge_slave_0: entered allmulticast mode
[   83.506058][ T5638] bridge_slave_0: entered promiscuous mode
[   83.554361][ T5640] team0: Port device team_slave_0 added
[   83.572698][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.572846][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.573262][ T5638] bridge_slave_1: entered allmulticast mode
[   83.576084][ T5638] bridge_slave_1: entered promiscuous mode
[   83.645043][ T5640] team0: Port device team_slave_1 added
[   83.669065][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.695754][ T5645] team0: Port device team_slave_0 added
[   83.718176][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.720778][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.723499][ T5645] team0: Port device team_slave_1 added
[   83.762699][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.762714][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.762739][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.804566][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.836636][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.836654][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.836679][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.840763][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.840831][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.840889][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.933688][ T5637] rxe_eth0 speed is unknown, defaulting to 1000
[   83.965363][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.965378][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.965399][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.013872][ T5639] team0: Port device team_slave_0 added
[   84.017137][ T5639] team0: Port device team_slave_1 added
[   84.024281][ T5638] team0: Port device team_slave_0 added
[   84.071521][ T5638] team0: Port device team_slave_1 added
[   84.145595][ T5640] hsr_slave_0: entered promiscuous mode
[   84.146907][ T5640] hsr_slave_1: entered promiscuous mode
[   84.178946][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.178965][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.178989][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.259941][ T5645] hsr_slave_0: entered promiscuous mode
[   84.260772][ T5645] hsr_slave_1: entered promiscuous mode
[   84.261404][ T5645] debugfs: 'hsr0' already exists in 'hsr'
[   84.261439][ T5645] Cannot create hsr debugfs directory
[   84.262277][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.262289][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.262311][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.263934][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.263944][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.263962][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.372494][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.372546][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.372612][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.537777][ T5642] Bluetooth: hci4: command tx timeout
[   84.537812][ T5642] Bluetooth: hci2: command tx timeout
[   84.537836][ T5642] Bluetooth: hci1: command tx timeout
[   84.538002][ T5643] Bluetooth: hci3: command tx timeout
[   84.618412][ T5643] Bluetooth: hci0: command tx timeout
[   84.621342][ T5639] hsr_slave_0: entered promiscuous mode
[   84.622171][ T5639] hsr_slave_1: entered promiscuous mode
[   84.622694][ T5639] debugfs: 'hsr0' already exists in 'hsr'
[   84.622710][ T5639] Cannot create hsr debugfs directory
[   84.653718][ T5638] hsr_slave_0: entered promiscuous mode
[   84.655947][ T5638] hsr_slave_1: entered promiscuous mode
[   84.656621][ T5638] debugfs: 'hsr0' already exists in 'hsr'
[   84.656634][ T5638] Cannot create hsr debugfs directory
[   85.051347][ T5640] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.056747][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.093824][ T5640] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.106204][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.107308][ T5640] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.124721][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.156401][ T5640] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.163455][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.270344][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.270453][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.270815][ T5637] bridge_slave_0: entered allmulticast mode
[   85.273039][ T5637] bridge_slave_0: entered promiscuous mode
[   85.280152][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.280425][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.284271][ T5637] bridge_slave_1: entered allmulticast mode
[   85.294246][ T5637] bridge_slave_1: entered promiscuous mode
[   85.367803][ T5645] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.371229][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.372002][ T5645] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.375430][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.376252][ T5645] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.385500][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.395828][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.416385][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.461182][ T5637] team0: Port device team_slave_0 added
[   85.461484][ T5645] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.464802][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.492078][ T5637] team0: Port device team_slave_1 added
[   85.550735][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.550748][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.550766][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.552895][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.552910][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.552934][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.700666][ T5638] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.703794][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.704726][ T5638] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.708925][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.740541][ T5637] hsr_slave_0: entered promiscuous mode
[   85.741529][ T5637] hsr_slave_1: entered promiscuous mode
[   85.742187][ T5637] debugfs: 'hsr0' already exists in 'hsr'
[   85.742198][ T5637] Cannot create hsr debugfs directory
[   85.746463][ T5638] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.765771][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.770894][ T5638] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.792650][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.013165][ T5639] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   86.016368][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.017377][ T5639] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   86.041747][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.042667][ T5639] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   86.046949][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.069241][ T5639] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   86.080576][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.084820][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.176909][ T5640] 8021q: adding VLAN 0 to HW filter on device team0
[   86.185970][ T5637] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.196726][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.214413][ T5637] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.220381][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.224731][ T5637] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.243697][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.246529][ T5637] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   86.264282][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.281263][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.281368][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.328065][   T88] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.328178][   T88] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.374185][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.444455][ T5645] 8021q: adding VLAN 0 to HW filter on device team0
[   86.480746][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.507675][   T88] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.507784][   T88] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.538853][   T88] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.538981][   T88] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.599371][ T5638] 8021q: adding VLAN 0 to HW filter on device team0
[   86.617725][ T4956] Bluetooth: hci1: command tx timeout
[   86.617760][ T4956] Bluetooth: hci2: command tx timeout
[   86.617785][ T4956] Bluetooth: hci4: command tx timeout
[   86.617950][ T5643] Bluetooth: hci3: command tx timeout
[   86.686116][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.686193][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.702607][ T5643] Bluetooth: hci0: command tx timeout
[   86.741244][   T88] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.741349][   T88] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.778545][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.852655][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.926472][ T5639] 8021q: adding VLAN 0 to HW filter on device team0
[   86.976407][ T5637] 8021q: adding VLAN 0 to HW filter on device team0
[   87.012464][   T88] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.012572][   T88] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.084032][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.084138][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.104825][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.104935][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.192526][   T88] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.192635][   T88] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.806189][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.060501][ T5640] veth0_vlan: entered promiscuous mode
[   88.121582][ T5640] veth1_vlan: entered promiscuous mode
[   88.210861][ T5640] veth0_macvtap: entered promiscuous mode
[   88.244082][ T5640] veth1_macvtap: entered promiscuous mode
[   88.305718][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.346960][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.400002][  T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.401010][   T88] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.429561][   T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.429605][   T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.545746][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.678135][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.708724][ T5642] Bluetooth: hci4: command tx timeout
[   88.708758][ T5642] Bluetooth: hci2: command tx timeout
[   88.708779][ T5642] Bluetooth: hci1: command tx timeout
[   88.708836][ T5643] Bluetooth: hci3: command tx timeout
[   88.778530][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.778559][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.796766][ T5643] Bluetooth: hci0: command tx timeout
[   88.861286][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.886048][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.886346][ T5638] veth0_vlan: entered promiscuous mode
[   88.904791][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.904812][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.970859][ T5638] veth1_vlan: entered promiscuous mode
[   89.041223][ T5645] veth0_vlan: entered promiscuous mode
[   89.092636][ T5645] veth1_vlan: entered promiscuous mode
[   89.152000][ T5639] veth0_vlan: entered promiscuous mode
[   89.169996][ T5638] veth0_macvtap: entered promiscuous mode
[   89.204274][ T5638] veth1_macvtap: entered promiscuous mode
[   89.226501][ T5639] veth1_vlan: entered promiscuous mode
[   89.289595][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.296425][ T5640] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   89.307326][ T5645] veth0_macvtap: entered promiscuous mode
[   89.331973][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.365307][ T5645] veth1_macvtap: entered promiscuous mode
[   89.444420][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.452522][ T5639] veth0_macvtap: entered promiscuous mode
[   89.459025][ T1180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.462589][ T1180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.462635][ T1180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.467911][ T1180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.474384][ T5639] veth1_macvtap: entered promiscuous mode
[   89.533140][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.613216][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.662829][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.662851][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.669936][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.742070][ T5637] veth0_vlan: entered promiscuous mode
[   89.777937][   T88] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.777990][   T88] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.778031][   T88] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.778082][   T88] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.814997][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.815047][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.832288][   T29] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.838388][   T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.931323][ T5637] veth1_vlan: entered promiscuous mode
[   90.111595][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.111629][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.238466][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.238487][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.243578][ T5637] veth0_macvtap: entered promiscuous mode
[   90.320261][ T5637] veth1_macvtap: entered promiscuous mode
[   90.392007][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.392031][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.430674][ T5860] loop2: detected capacity change from 0 to 40427
[   90.451270][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.452901][   T88] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.475260][ T5860] F2FS-fs (loop2): build fault injection rate: 14
[   90.475281][ T5860] F2FS-fs (loop2): build fault injection type: 0xe4
[   90.495575][ T5860] F2FS-fs (loop2): invalid crc value
[   90.555524][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.555545][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.602080][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.635727][ T5860] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   90.652267][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.654750][ T5860] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   90.822726][   T34] audit: type=1800 audit(1793444813.653:2): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6" name="file1" dev="loop2" ino=10 res=0 errno=-22
[   90.896172][ T5640] syz-executor: attempt to access beyond end of device
[   90.896172][ T5640] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   90.896781][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   90.896808][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   90.896828][ T5640] Call Trace:
[   90.896837][ T5640]  <TASK>
[   90.896847][ T5640]  dump_stack_lvl+0xe8/0x150
[   90.896908][ T5640]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   90.896952][ T5640]  f2fs_write_end_bio+0x118e/0x15d0
[   90.897005][ T5640]  __submit_merged_bio+0x258/0x6a0
[   90.897039][ T5640]  ? rcu_is_watching+0x16/0xb0
[   90.897082][ T5640]  f2fs_submit_merged_write_cond+0x1ef/0x590
[   90.897122][ T5640]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[   90.897189][ T5640]  f2fs_write_data_pages+0x2a13/0x36e0
[   90.897213][ T5640]  ? __pfx_hlock_conflict+0x10/0x10
[   90.897296][ T5640]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   90.897320][ T5640]  ? is_bpf_text_address+0x26/0x2b0
[   90.897360][ T5640]  ? arch_stack_walk+0xfb/0x150
[   90.897429][ T5640]  ? add_lock_to_list+0xc7/0x100
[   90.897466][ T5640]  ? lockdep_unlock+0x5c/0xd0
[   90.897489][ T5640]  ? __lock_acquire+0x1511/0x2de0
[   90.897551][ T5640]  ? do_raw_spin_lock+0x12b/0x2f0
[   90.897595][ T5640]  ? do_raw_spin_unlock+0xf5/0x200
[   90.897620][ T5640]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   90.897648][ T5640]  do_writepages+0x338/0x560
[   90.897687][ T5640]  ? do_raw_spin_unlock+0xf5/0x200
[   90.897717][ T5640]  filemap_fdatawrite+0x1e9/0x2f0
[   90.897748][ T5640]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   90.897829][ T5640]  ? do_raw_spin_unlock+0xf5/0x200
[   90.897859][ T5640]  f2fs_sync_dirty_inodes+0x471/0x970
[   90.897907][ T5640]  f2fs_write_checkpoint+0x867/0x24d0
[   90.897983][ T5640]  kill_f2fs_super+0x2df/0x700
[   90.898018][ T5640]  ? rcu_do_enqueue+0x616/0x870
[   90.898058][ T5640]  ? lockdep_hardirqs_on+0x7b/0x110
[   90.898087][ T5640]  ? __pfx_kill_f2fs_super+0x10/0x10
[   90.898131][ T5640]  ? __pfx_call_rcu+0x10/0x10
[   90.898157][ T5640]  ? shrinker_free+0x2a7/0x3b0
[   90.898184][ T5640]  deactivate_locked_super+0xbe/0x110
[   90.898215][ T5640]  cleanup_mnt+0x204/0x2a0
[   90.898255][ T5640]  task_work_run+0x1d9/0x260
[   90.898287][ T5640]  ? __pfx_task_work_run+0x10/0x10
[   90.898326][ T5640]  exit_to_user_mode_loop+0x204/0x770
[   90.898357][ T5640]  ? rcu_is_watching+0x16/0xb0
[   90.898393][ T5640]  do_syscall_64+0x328/0x520
[   90.898419][ T5640]  ? trace_irq_disable+0x3b/0x140
[   90.898450][ T5640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.898471][ T5640]  ? clear_bhb_loop+0x70/0xc0
[   90.898500][ T5640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.898521][ T5640] RIP: 0033:0x7f17603a0797
[   90.898556][ T5640] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   90.898581][ T5640] RSP: 002b:00007ffd1ffb7a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   90.898608][ T5640] RAX: 0000000000000000 RBX: 00007f1760435f93 RCX: 00007f17603a0797
[   90.898623][ T5640] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1ffb7b40
[   90.898636][ T5640] RBP: 00007ffd1ffb7b40 R08: 00007ffd1ffb8b40 R09: 00000000ffffffff
[   90.898649][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1ffb8bd0
[   90.898661][ T5640] R13: 00007f1760435f93 R14: 0000000000016299 R15: 00007ffd1ffb8c10
[   90.898698][ T5640]  </TASK>
[   91.016338][  T167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.020332][ T1275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.020408][ T1275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.020446][ T1275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.024668][ T5640] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   91.469696][ T5866] device-mapper: table: 248:0: crypt: Error allocating crypto tfm (-EINTR)
[   91.469729][ T5866] device-mapper: ioctl: error adding target to table
[   91.494373][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.494395][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.702891][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.702914][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.892544][ T5884] loop1: detected capacity change from 0 to 1024
[   91.912156][ T1589] cfg80211: failed to load regulatory.db
[   92.046702][ T5886] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   92.249780][ T5894] loop3: detected capacity change from 0 to 256
[   92.255465][ T5894] =======================================================
[   92.255465][ T5894] WARNING: The mand mount option has been deprecated and
[   92.255465][ T5894]          and is ignored by this kernel. Remove the mand
[   92.255465][ T5894]          option from the mount to silence this warning.
[   92.255465][ T5894] =======================================================
[   92.382815][ T5894] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   92.443750][ T5898] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.672984][ T5904] loop1: detected capacity change from 0 to 16
[   92.697203][ T5768] rxe_eth0 speed is unknown, defaulting to 1000
[   92.753646][ T5904] erofs (device loop1): mounted with root inode @ nid 36.
[   93.078049][ T5818] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   93.237711][ T5818] usb 2-1: Using ep0 maxpacket: 8
[   93.270127][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short
[   93.270241][ T5818] usb 2-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05
[   93.277379][ T5818] usb 2-1: unable to read config index 0 descriptor/start: -71
[   93.277419][ T5818] usb 2-1: can't read configurations, error -71
[   93.431983][ T5928] serio: Serial port ttyS3
[   93.774908][ T5927] loop0: detected capacity change from 0 to 32768
[   93.804174][ T5927] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.24 (5927)
[   93.866462][ T5927] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   93.866509][ T5927] BTRFS info (device loop0): using crc32c checksum algorithm
[   94.116898][ T5954] loop2: detected capacity change from 0 to 512
[   94.147150][ T5954] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[   94.147170][ T5954] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   94.147185][ T5954] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   94.222390][ T5927] BTRFS info (device loop0): enabling ssd optimizations
[   94.222422][ T5927] BTRFS info (device loop0): turning on flush-on-commit
[   94.222444][ T5927] BTRFS info (device loop0): enabling free space tree
[   94.222461][ T5927] BTRFS info (device loop0): enabling auto defrag
[   94.222491][ T5927] BTRFS info (device loop0): use lzo compression, level 1
[   94.222512][ T5927] BTRFS info (device loop0): max_inline set to 4096
[   94.284289][ T5954] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.29: bad orphan inode 131083
[   94.284471][ T5954] loop2: lost filesystem error report for type 5 error -117
[   94.287740][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   94.287762][    C1] EXT4-fs (loop2): initial error at time 1793444817: ext4_orphan_get:1430
[   94.287786][    C1] EXT4-fs (loop2): last error at time 1793444817: ext4_orphan_get:1430
[   94.344706][ T5965] loop1: detected capacity change from 0 to 128
[   94.368974][ T5954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.399127][ T5965] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   94.502990][ T5927] BTRFS critical (device loop0 state EH): emergency shutdown
[   94.552057][ T5932] loop3: detected capacity change from 0 to 32768
[   94.565497][ T5932] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.26 (5932)
[   94.596191][ T5954] overlayfs: upper fs needs to support d_type.
[   94.610590][ T5932] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   94.610622][ T5932] BTRFS info (device loop3): using sha256 checksum algorithm
[   94.709202][ T5645] BTRFS info (device loop0 state EH): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   94.775726][ T5640] EXT4-fs error (device loop2): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /6/file1: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   94.814699][ T5932] BTRFS info (device loop3): enabling ssd optimizations
[   94.814724][ T5932] BTRFS info (device loop3): turning on async discard
[   94.814741][ T5932] BTRFS info (device loop3): enabling free space tree
[   95.039767][ T5638] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   95.404655][ T5999] loop4: detected capacity change from 0 to 128
[   95.635749][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.703578][ T6004] netlink: 27 bytes leftover after parsing attributes in process `syz.3.44'.
[   95.751551][  T167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.882031][ T6005] loop0: detected capacity change from 0 to 2048
[   95.996893][ T6009] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.134475][  T167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.306494][  T167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.356960][ T6016] loop1: detected capacity change from 0 to 512
[   96.367843][ T6018] loop3: detected capacity change from 0 to 512
[   96.369357][ T6016] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.396966][ T6016] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   96.481584][ T6016] EXT4-fs (loop1): 1 truncate cleaned up
[   96.525738][ T6016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.578395][  T167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.620032][ T6016] EXT4-fs warning (device loop1): ext4_group_add:1738: No reserved GDT blocks, can't resize
[   96.743118][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.773747][ T4956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   96.787040][ T4956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   96.795471][ T4956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   96.807184][ T4956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   96.820680][ T4956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   96.921851][ T6035] loop0: detected capacity change from 0 to 512
[   96.924589][ T6035] EXT4-fs: Ignoring removed nobh option
[   96.939754][ T6035] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[   97.121964][  T167] bridge_slave_1: left allmulticast mode
[   97.122003][  T167] bridge_slave_1: left promiscuous mode
[   97.122928][  T167] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.163276][  T167] bridge_slave_0: left allmulticast mode
[   97.163303][  T167] bridge_slave_0: left promiscuous mode
[   97.163851][  T167] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.555103][  T167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.572947][  T167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.575365][  T167] bond0 (unregistering): Released all slaves
[   97.638798][ T6060] dummy0: entered allmulticast mode
[   97.640282][ T6060] dummy0: left allmulticast mode
[   97.679077][ T6061] loop0: detected capacity change from 0 to 512
[   97.682728][ T6061] EXT4-fs: Ignoring removed bh option
[   97.706469][ T6061] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[   97.726036][ T6061] EXT4-fs (loop0): 1 truncate cleaned up
[   97.751659][ T6061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.015848][ T6068] input: syz1 as /devices/virtual/input/input5
[   98.030834][ T5645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.402344][ T6087] warning: `syz.0.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   98.809573][ T6105] loop0: detected capacity change from 0 to 512
[   98.830371][ T6105] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   98.844108][ T6028] rxe_eth0 speed is unknown, defaulting to 1000
[   98.858218][ T5643] Bluetooth: hci3: command tx timeout
[   98.870315][ T6105] EXT4-fs (loop0): 1 truncate cleaned up
[   98.893902][ T5300] 8021q: adding VLAN 0 to HW filter on device eth1
[   98.910433][ T6105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.136659][ T5645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.590873][ T6134] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.85'.
[   99.737905][   T34] audit: type=1400 audit(1793444822.573:3): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="f/o" pid=6139 comm="syz.4.88" name="f/o" offset=55
[   99.783782][   T34] audit: type=1400 audit(1793444822.623:4): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=6136 comm="syz.1.87"
[   99.957764][ T5788] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  100.056500][ T6151] loop1: detected capacity change from 0 to 2048
[  100.088076][ T6151] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  100.100662][ T6151] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  100.120491][ T5788] usb 4-1: New USB device found: idVendor=045e, idProduct=0775, bcdDevice=1.00
[  100.121200][ T5788] usb 4-1: config 0 has no interfaces?
[  100.124003][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  100.124034][ T5788] usb 4-1: Product: syz
[  100.124050][ T5788] usb 4-1: Manufacturer: syz
[  100.136839][ T6151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.243781][ T5788] usb 4-1: config 0 descriptor??
[  100.375664][ T6162] loop0: detected capacity change from 0 to 128
[  100.414845][  T167] hsr_slave_0: left promiscuous mode
[  100.417271][  T167] hsr_slave_1: left promiscuous mode
[  100.427332][  T167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.427424][  T167] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.437654][ T6162] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  100.457343][ T6160] block2mtd: error: cannot open device 
[  100.457458][ T6162] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  100.478920][  T167] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.478944][  T167] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.512010][ T5818] usb 4-1: USB disconnect, device number 2
[  100.561578][  T167] veth1_macvtap: left promiscuous mode
[  100.561633][  T167] veth0_macvtap: left promiscuous mode
[  100.561740][  T167] veth1_vlan: left promiscuous mode
[  100.561826][  T167] veth0_vlan: left promiscuous mode
[  100.681535][ T6167] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  100.694568][  T159] IPVS: starting estimator thread 0...
[  100.735846][ T5645] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  100.773597][ T6170] Bluetooth: MGMT ver 1.23
[  100.787677][ T6168] IPVS: using max 33 ests per chain, 79200 per kthread
[  100.929704][ T6178] loop1: detected capacity change from 0 to 512
[  100.937753][ T5643] Bluetooth: hci3: command tx timeout
[  101.048297][ T6178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.048416][ T6178] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.385726][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.619757][ T6197] loop1: detected capacity change from 0 to 128
[  101.684757][  T167] team0 (unregistering): Port device team_slave_1 removed
[  101.722122][ T6197] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  101.730831][ T6197] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  102.128290][  T167] team0 (unregistering): Port device team_slave_0 removed
[  102.135980][ T5639] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  102.535458][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'.
[  102.535490][ T6215] netlink: 36 bytes leftover after parsing attributes in process `syz.1.117'.
[  102.567900][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'.
[  102.567947][ T6215] netlink: 36 bytes leftover after parsing attributes in process `syz.1.117'.
[  102.568139][ T6215] Zero length message leads to an empty skb
[  102.645016][ T5300] 8021q: adding VLAN 0 to HW filter on device eth2
[  103.027779][ T5643] Bluetooth: hci3: command tx timeout
[  103.113902][ T6241] capability: warning: `syz.3.124' uses 32-bit capabilities (legacy support in use)
[  103.231831][ T6247] program syz.4.127 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  103.460298][ T6259] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  103.815505][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.815637][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.815798][ T6028] bridge_slave_0: entered allmulticast mode
[  103.845225][ T6028] bridge_slave_0: entered promiscuous mode
[  103.860006][ T6270] loop1: detected capacity change from 0 to 4096
[  103.882832][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.882934][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.883080][ T6028] bridge_slave_1: entered allmulticast mode
[  103.885527][ T6270] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  103.918461][ T6028] bridge_slave_1: entered promiscuous mode
[  104.002950][ T6028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.006407][ T6028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.065656][ T6028] team0: Port device team_slave_0 added
[  104.075105][ T6028] team0: Port device team_slave_1 added
[  104.086723][ T5300] 8021q: adding VLAN 0 to HW filter on device eth3
[  104.134204][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.134222][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.134248][ T6028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.136198][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.136213][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.136239][ T6028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.168415][ T6270] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  104.185807][ T5788] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  104.284747][ T6280] loop0: detected capacity change from 0 to 256
[  104.365941][ T5788] usb 5-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00
[  104.374802][ T5788] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  104.374890][ T5788] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  104.374980][ T5788] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  104.375099][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.468256][ T6028] hsr_slave_0: entered promiscuous mode
[  104.470980][ T6028] hsr_slave_1: entered promiscuous mode
[  104.476901][ T6278] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  104.732498][ T6291] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  105.099500][ T5643] Bluetooth: hci3: command tx timeout
[  105.257352][ T6028] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  105.293241][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  105.294410][ T6028] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  105.330986][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  105.333356][ T6028] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  105.369773][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  105.372759][ T6028] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  105.407737][ T5371] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  105.410208][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  105.555727][ T5788] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  105.565298][ T5371] usb 1-1: New USB device found: idVendor=145f, idProduct=0212, bcdDevice=0.00
[  105.575883][ T5371] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  105.575945][ T5371] usb 1-1: config 0 has no interface number 0
[  105.576072][ T5371] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  105.576149][ T5371] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.576203][ T5371] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  105.576266][ T5371] usb 1-1: config 0 interface 1 has no altsetting 0
[  105.596930][ T5371] usb 1-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[  105.597003][ T5371] usb 1-1: Manufacturer: syz
[  105.653315][ T5788] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input6
[  105.668446][ T5371] usb 1-1: config 0 descriptor??
[  105.751570][ T5788] usb 5-1: USB disconnect, device number 2
[  105.751678][    C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  105.936543][ T6331] loop1: detected capacity change from 0 to 2048
[  105.953054][ T6028] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.975556][ T6331]  loop1: p1 < > p3 < p5 > p4
[  105.975584][ T6331] loop1: partition table partially beyond EOD, truncated
[  105.975899][ T6331] loop1: p1 start 3405780737 is beyond EOD, truncated
[  106.003344][ T6028] 8021q: adding VLAN 0 to HW filter on device team0
[  106.027439][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.027631][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.060511][ T1589] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  106.065627][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.065743][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.215330][ T1589] usb 4-1: New USB device found: idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  106.229943][ T1589] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  106.229987][ T1589] usb 4-1: config 0 has no interface number 0
[  106.270240][ T1589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.270270][ T1589] usb 4-1: Product: syz
[  106.270286][ T1589] usb 4-1: Manufacturer: syz
[  106.270301][ T1589] usb 4-1: SerialNumber: syz
[  106.307283][ T1589] usb 4-1: config 0 descriptor??
[  106.353004][ T5371] uclogic 0003:145F:0212.0001: pen parameters not found
[  106.353038][ T5371] uclogic 0003:145F:0212.0001: interface is invalid, ignoring
[  106.407507][ T5300] 8021q: adding VLAN 0 to HW filter on device eth4
[  106.448298][ T5371] usb 1-1: USB disconnect, device number 2
[  107.160410][ T1589] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  107.160461][ T1589] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  107.160983][ T1589] asix 4-1:0.251: probe with driver asix failed with error -71
[  107.236179][ T1589] usb 4-1: USB disconnect, device number 3
[  107.437886][ T5788] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  107.463546][ T6028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.589582][ T5788] usb 1-1: New USB device found: idVendor=1a34, idProduct=0802, bcdDevice=0.00
[  107.590616][ T5788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  107.590647][ T5788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.590668][ T5788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  107.590707][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.594757][ T5788] usb 1-1: config 0 descriptor??
[  108.022273][ T5788] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  108.022317][ T5788] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  108.022345][ T5788] acrux 0003:1A34:0802.0002: unknown main item tag 0x2
[  108.022372][ T5788] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  108.022398][ T5788] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  108.022423][ T5788] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  108.022450][ T5788] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  108.022476][ T5788] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  108.022502][ T5788] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  108.022527][ T5788] acrux 0003:1A34:0802.0002: unknown main item tag 0x0
[  108.022643][ T5788] acrux 0003:1A34:0802.0002: item fetching failed at offset 23/41
[  108.108087][ T5788] acrux 0003:1A34:0802.0002: parse failed
[  108.108169][ T5788] acrux 0003:1A34:0802.0002: probe with driver acrux failed with error -22
[  108.232870][ T5788] usb 1-1: USB disconnect, device number 3
[  108.282112][ T6028] veth0_vlan: entered promiscuous mode
[  108.313940][ T6028] veth1_vlan: entered promiscuous mode
[  108.366925][ T6028] veth0_macvtap: entered promiscuous mode
[  108.385942][ T6028] veth1_macvtap: entered promiscuous mode
[  108.412568][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.436817][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.514981][ T6393] sock: sock_set_timeout: `syz.1.169' (pid 6393) tries to set negative timeout
[  108.539385][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.579073][  T167] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.580840][   T88] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.580883][   T88] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.644024][  T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.644044][  T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.702985][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.703006][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.000872][ T6409] process 'syz.0.175' launched './file0' with NULL argv: empty string added
[  109.314476][ T6425] loop0: detected capacity change from 0 to 256
[  109.771109][ T6415] loop5: detected capacity change from 0 to 32768
[  109.773979][ T6415] xfs: Deprecated parameter 'ikeep'
[  109.774002][ T6415] XFS: ikeep mount option is deprecated.
[  109.856139][ T6415] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  109.873730][ T6415] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.047086][ T6415] XFS (loop5): Ending clean mount
[  110.132032][ T6415] XFS (loop5): Quotacheck needed: Please wait.
[  110.175390][ T6455] loop4: detected capacity change from 0 to 1024
[  110.205882][   T14] XFS (loop5): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  110.205928][   T14] XFS (loop5): Unmount and run xfs_repair
[  110.205942][   T14] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  110.205980][   T14] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  110.205992][   T14] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  110.206002][   T14] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  110.206013][   T14] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  110.206023][   T14] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.206034][   T14] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.206044][   T14] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.206054][   T14] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  110.206178][   T14] XFS (loop5): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74
[  110.206320][   T14] loop5: lost filesystem error report for type 5 error -117
[  110.357839][ T6415] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  110.358948][ T6415] loop5: lost filesystem error report for type 5 error -117
[  110.690058][ T6028] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.721765][ T6028] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  111.066425][ T6462] loop3: detected capacity change from 0 to 1024
[  111.133197][ T6440] loop0: detected capacity change from 0 to 32768
[  111.150607][ T6440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.189 (6440)
[  111.205177][ T6440] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.205210][ T6440] BTRFS info (device loop0): using sha256 checksum algorithm
[  111.360198][ T6440] BTRFS info (device loop0): enabling ssd optimizations
[  111.360225][ T6440] BTRFS info (device loop0): turning on async discard
[  111.360242][ T6440] BTRFS info (device loop0): enabling free space tree
[  111.528595][ T6490] loop1: detected capacity change from 0 to 2048
[  111.548626][ T6490] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  111.579122][ T6490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.585276][ T5645] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.260393][ T6523] capability: warning: `syz.4.213' uses deprecated v2 capabilities in a way that may be insecure
[  112.268036][ T6522] loop1: detected capacity change from 0 to 256
[  112.289247][ T6522] exfat: Deprecated parameter 'utf8'
[  112.330127][ T6523] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  112.330153][ T6523] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  112.331165][ T6522] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  112.709477][ T6535] loop0: detected capacity change from 0 to 256
[  112.713092][ T6535] exfat: Deprecated parameter 'namecase'
[  112.775298][ T6535] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x8114471f, utbl_chksum : 0xe619d30d)
[  112.797038][ T6537] device-mapper: table: 248:1: verity: Data device is too small (-EINVAL)
[  112.797061][ T6537] device-mapper: ioctl: error adding target to table
[  112.857391][ T6540] loop3: detected capacity change from 0 to 256
[  112.899236][ T6540] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  113.062261][ T6516] loop5: detected capacity change from 0 to 32768
[  113.067047][ T6516] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.212 (6516)
[  113.130329][ T6516] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.130366][ T6516] BTRFS info (device loop5): using sha256 checksum algorithm
[  113.214256][ T6548] sd 0:0:1:0: PR command failed: 1026
[  113.214312][ T6548] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  113.214383][ T6548] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  113.374742][ T6516] BTRFS info (device loop5): enabling ssd optimizations
[  113.374773][ T6516] BTRFS info (device loop5): turning on async discard
[  113.374792][ T6516] BTRFS info (device loop5): enabling free space tree
[  113.832456][ T6028] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.996912][   T14] exFAT-fs (loop3): error, broken FAT chain.
[  113.996933][   T14] exFAT-fs (loop3): Filesystem has been set read-only
[  113.997318][   T14] loop3: writeback error on inode 28, offset 8192, sector 208
[  114.016195][   T14] exFAT-fs (loop3): error, broken FAT chain.
[  114.016234][   T14] exFAT-fs (loop3): error, broken FAT chain.
[  114.016334][   T14] exFAT-fs (loop3): error, broken FAT chain.
[  114.334097][ T6581] ip_tables: iptables: counters copy to user failed while replacing table
[  114.368995][ T6580] loop0: detected capacity change from 0 to 2048
[  114.449098][ T6580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.449212][ T6580] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.606252][ T6589] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.233: bg 0: block 345: padding at end of block bitmap is not set
[  114.645838][ T6589] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 117
[  114.645867][ T6589] EXT4-fs (loop0): This should not happen!! Data will be lost
[  114.645867][ T6589] 
[  114.750715][ T6595] loop1: detected capacity change from 0 to 512
[  114.764136][ T6595] EXT4-fs: Ignoring removed nobh option
[  114.798398][ T6580] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28
[  114.798431][ T6580] EXT4-fs (loop0): This should not happen!! Data will be lost
[  114.798431][ T6580] 
[  114.798455][ T6580] EXT4-fs (loop0): Total free blocks count 0
[  114.798470][ T6580] EXT4-fs (loop0): Free/Dirty block details
[  114.798503][ T6580] EXT4-fs (loop0): free_blocks=0
[  114.798534][ T6580] EXT4-fs (loop0): dirty_blocks=128
[  114.798549][ T6580] EXT4-fs (loop0): Block reservation details
[  114.855272][ T6595] EXT4-fs (loop1): 1 truncate cleaned up
[  114.866490][ T6595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.084722][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.230720][ T6608] loop0: detected capacity change from 0 to 256
[  115.405981][ T6604] loop5: detected capacity change from 0 to 32768
[  115.538995][ T6611] macvlan2: entered promiscuous mode
[  115.539019][ T6611] bridge0: entered promiscuous mode
[  115.862455][ T6622] tap0: tun_chr_ioctl cmd 1074025676
[  115.862478][ T6622] tap0: owner set to 0
[  116.689700][ T6623] loop4: detected capacity change from 0 to 32768
[  116.753351][ T6627] loop3: detected capacity change from 0 to 32768
[  116.827796][ T6648] nvme_fcloop: unknown parameter or missing value 'w'
[  116.874289][ T6623] ea_get: invalid extended attribute
[  116.874306][ T6623] ffff888072479da0: 04 00 00 00                                      ....
[  117.082540][ T6625] loop5: detected capacity change from 0 to 32768
[  117.103187][ T6625] xfs: Deprecated parameter 'ikeep'
[  117.103206][ T6625] XFS: ikeep mount option is deprecated.
[  117.155013][ T6625] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  117.367367][ T6625] XFS (loop5): Ending clean mount
[  117.613722][ T6028] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  117.958349][  T984] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  118.069091][ T6683] netlink: 104 bytes leftover after parsing attributes in process `syz.4.269'.
[  118.132210][  T984] usb 2-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  118.158411][  T984] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  118.158437][  T984] usb 2-1: Product: syz
[  118.158452][  T984] usb 2-1: Manufacturer: syz
[  118.158466][  T984] usb 2-1: SerialNumber: syz
[  118.167263][  T984] usb 2-1: config 0 descriptor??
[  118.221029][  T984] ch341 2-1:0.0: ch341-uart converter detected
[  118.270926][ T6691] loop5: detected capacity change from 0 to 128
[  118.302032][ T6691] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  118.302985][ T6690] loop4: detected capacity change from 0 to 1024
[  118.303924][ T6690] EXT4-fs: Ignoring removed oldalloc option
[  118.331511][ T6690] EXT4-fs: Ignoring removed orlov option
[  118.353672][ T6691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.397404][ T6690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.593847][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.816685][ T6705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.273'.
[  119.064707][  T984] usb 2-1: failed to send control message: -71
[  119.064755][  T984] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  119.088430][  T984] usb 2-1: USB disconnect, device number 4
[  119.090759][  T984] ch341 2-1:0.0: device disconnected
[  119.144264][ T6712] loop5: detected capacity change from 0 to 4096
[  119.197344][ T6712] NILFS (loop5): invalid segment: Checksum error in segment payload
[  119.197369][ T6712] NILFS (loop5): trying rollback from an earlier position
[  119.271970][ T6712] NILFS (loop5): recovery complete
[  119.299647][ T6720] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.806831][ T6737] loop4: detected capacity change from 0 to 256
[  119.822587][ T6737] exfat: Deprecated parameter 'utf8'
[  119.822660][ T6737] exfat: Deprecated parameter 'namecase'
[  119.822714][ T6737] exfat: Deprecated parameter 'namecase'
[  119.822777][ T6737] exfat: Deprecated parameter 'namecase'
[  119.905149][ T6737] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  119.928277][ T6744] loop0: detected capacity change from 0 to 1024
[  119.930984][ T6744] EXT4-fs: Ignoring removed nobh option
[  119.931003][ T6744] EXT4-fs: Ignoring removed bh option
[  120.023277][ T6744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.322885][ T5645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.352282][ T6755] loop3: detected capacity change from 0 to 512
[  120.409917][ T6755] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.291: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840
[  120.409971][ T6755] loop3: lost filesystem error report for type 5 error -117
[  120.417608][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  120.417630][    C0] EXT4-fs (loop3): initial error at time 1793444843: ext4_xattr_inode_iget:473
[  120.417665][    C0] EXT4-fs (loop3): last error at time 1793444843: ext4_xattr_inode_iget:473
[  120.516720][ T6753] rxe_eth0 speed is unknown, defaulting to 1000
[  120.540116][ T6755] EXT4-fs (loop3): 1 orphan inode deleted
[  120.584460][ T6755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.145240][ T6771] loop0: detected capacity change from 0 to 764
[  121.244892][ T6771] rock: directory entry would overflow storage
[  121.244908][ T6771] rock: sig=0x4654, size=5, remaining=4
[  121.446888][ T6782] loop4: detected capacity change from 0 to 512
[  121.467171][ T6782] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  121.467190][ T6782] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  121.525446][ T6782] EXT4-fs (loop4): 1 truncate cleaned up
[  121.541050][ T6782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.252714][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.533374][ T6815] cougar: G6 mapped to space
[  122.866144][ T6827] loop1: detected capacity change from 0 to 512
[  122.867241][ T6827] EXT4-fs: Ignoring removed bh option
[  122.897184][ T6827] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.313: inode #13: comm syz.1.313: iget: illegal inode #
[  122.897216][ T6827] loop1: lost filesystem error report for type 5 error -117
[  122.897575][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  122.897596][    C0] EXT4-fs (loop1): initial error at time 1793444845: ext4_orphan_get:1404
[  122.897620][    C0] EXT4-fs (loop1): last error at time 1793444845: ext4_orphan_get:1404
[  122.954436][ T6827] EXT4-fs (loop1): Remounting filesystem read-only
[  122.973313][ T6827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.249600][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.820811][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.838627][ T5371] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  123.993389][ T5371] usb 6-1: New USB device found: idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  124.007784][ T5371] usb 6-1: config 0 has an invalid interface number: 4 but max is 3
[  124.007813][ T5371] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 4
[  124.007835][ T5371] usb 6-1: config 0 has no interface number 0
[  124.007883][ T5371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.016812][ T5371] usb 6-1: config 0 descriptor??
[  124.035062][ T5371] ums-realtek 6-1:0.4: USB Mass Storage device detected
[  124.206220][ T6878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.332'.
[  124.284633][ T5371] usb 6-1: USB disconnect, device number 2
[  124.441876][ T6886] loop3: detected capacity change from 0 to 1024
[  124.482106][ T6891] loop0: detected capacity change from 0 to 2048
[  124.484963][ T6891] EXT4-fs: Ignoring removed nobh option
[  124.515697][ T6893] loop4: detected capacity change from 0 to 256
[  124.554850][ T6891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.596451][ T6893] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  124.644625][ T6891] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  124.676160][ T6891] EXT4-fs (loop0): Remounting filesystem read-only
[  124.754209][ T5645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.896774][ T6902] loop0: detected capacity change from 0 to 8
[  124.921697][ T6900] program syz.1.339 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  125.078030][ T5788] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  125.247868][ T5788] usb 4-1: Using ep0 maxpacket: 32
[  125.249872][ T5788] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  125.252067][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.269246][ T5788] usb 4-1: config 0 descriptor??
[  125.322143][ T6923] loop1: detected capacity change from 0 to 512
[  125.380248][ T6923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.380362][ T6923] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.503892][ T6928] loop4: detected capacity change from 0 to 512
[  125.522288][ T5788] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  125.550582][ T5788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  125.552307][ T6928] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.349: bad orphan inode 15
[  125.552334][ T6928] loop4: lost filesystem error report for type 5 error -117
[  125.552845][ T6928] ext4_test_bit(bit=14, block=18) = 1
[  125.552863][ T6928] is_bad_inode(inode)=0
[  125.552872][ T6928] NEXT_ORPHAN(inode)=1023
[  125.552881][ T6928] max_ino=32
[  125.552889][ T6928] i_nlink=0
[  125.554971][ T5788] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  125.555019][ T5788] usb 4-1: media controller created
[  125.567786][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  125.567839][    C1] EXT4-fs (loop4): initial error at time 1793444848: ext4_orphan_get:1430
[  125.567908][    C1] EXT4-fs (loop4): last error at time 1793444848: ext4_orphan_get:1430
[  125.573038][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.619916][ T5788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  125.667947][ T6928] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #15: comm syz.4.349: corrupted xattr block 19: invalid header
[  125.668227][ T6928] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  125.683153][ T6928] EXT4-fs warning (device loop4): ext4_evict_inode:355: xattr delete (err -117)
[  125.697348][ T6928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  125.730690][ T6928] ext4 filesystem being mounted at /85/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  125.906391][ T5788] az6027: usb out operation failed. (-71)
[  125.925800][ T5788] az6027: usb out operation failed. (-71)
[  125.925818][ T5788] stb0899_attach: Driver disabled by Kconfig
[  125.925829][ T5788] az6027: no front-end attached
[  125.925829][ T5788] 
[  125.926251][ T5788] az6027: usb out operation failed. (-71)
[  125.926264][ T5788] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  125.989321][ T5788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7
[  126.034917][ T5788] dvb-usb: schedule remote query interval to 400 msecs.
[  126.034941][ T5788] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  126.068946][ T5788] usb 4-1: USB disconnect, device number 4
[  126.285382][ T5788] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  126.369301][ T6944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.354'.
[  126.612847][ T6952] xt_hashlimit: size too large, truncated to 1048576
[  126.698041][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  126.778050][ T5371] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  126.906874][ T6964] loop3: detected capacity change from 0 to 512
[  126.928601][ T5371] usb 6-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  126.929139][ T6964] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  126.929156][ T6964] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  126.934073][ T5371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.934095][ T5371] usb 6-1: Product: syz
[  126.934108][ T5371] usb 6-1: Manufacturer: syz
[  126.934121][ T5371] usb 6-1: SerialNumber: syz
[  126.995896][ T6964] EXT4-fs error (device loop3): ext4_iget_extra_inode:6027: inode #15: comm syz.3.363: corrupted in-inode xattr: overlapping e_value 
[  126.995941][ T6964] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  127.010081][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  127.010104][    C0] EXT4-fs (loop3): initial error at time 1793444849: ext4_iget_extra_inode:6027: inode 15
[  127.010141][    C0] EXT4-fs (loop3): last error at time 1793444849: ext4_iget_extra_inode:6027: inode 15
[  127.011756][ T6964] EXT4-fs (loop3): Remounting filesystem read-only
[  127.058170][ T5371] usb 6-1: config 0 descriptor??
[  127.060678][ T6964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.103135][ T5371] hub 6-1:0.0: bad descriptor, ignoring hub
[  127.103162][ T5371] hub 6-1:0.0: probe with driver hub failed with error -5
[  127.177350][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.287834][ T5371] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  127.307753][ T5371] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  127.310760][ T5371] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  127.310810][ T5371] usb 6-1: media controller created
[  127.352833][ T5371] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  127.355923][ T6972] loop0: detected capacity change from 0 to 512
[  127.426553][ T6972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.426652][ T6972] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  127.479101][ T5371] DVB: Unable to find symbol dib7000p_attach()
[  127.479118][ T5371] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  127.584210][   T34] audit: type=1800 audit(1793444850.423:5): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.367" name="file1" dev="loop0" ino=15 res=0 errno=-22
[  127.748168][ T5371] rc_core: IR keymap rc-dib0700-rc5 not found
[  127.748185][ T5371] Registered IR keymap rc-empty
[  127.749097][ T5371] dvb-usb: could not initialize remote control.
[  127.749152][ T5371] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  127.789649][ T5371] usb 6-1: USB disconnect, device number 3
[  127.904376][ T5371] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  128.101510][ T5645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.190507][ T6995] loop0: detected capacity change from 0 to 256
[  128.284589][ T6995] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  128.315362][ T6995] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff)
[  128.333736][ T6963] loop4: detected capacity change from 0 to 40427
[  128.351155][ T6995] exFAT-fs (loop0): valid_size(150994954) is greater than size(10)
[  128.394327][ T6963] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  128.394353][ T6963] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  128.448696][ T6963] F2FS-fs (loop4): invalid crc value
[  128.759886][ T6963] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.814981][ T6963] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  128.815011][ T6963] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  128.903364][ T7013] netlink: 76 bytes leftover after parsing attributes in process `syz.0.382'.
[  129.230382][ T7022] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  129.230382][ T7022] The task syz.5.387 (7022) triggered the difference, watch for misbehavior.
[  132.860656][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  132.860736][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  194.300228][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  194.300441][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  206.629705][ T5653] Bluetooth: hci2: command 0x0406 tx timeout
[  206.629746][ T5653] Bluetooth: hci4: command 0x0406 tx timeout
[  206.629773][ T5653] Bluetooth: hci1: command 0x0406 tx timeout
[  206.629797][ T5653] Bluetooth: hci0: command 0x0406 tx timeout
[  247.587948][ T4956] Bluetooth: hci3: command 0x0406 tx timeout
[  255.739167][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  255.739210][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  280.698066][   T36] INFO: task kworker/u8:8:167 blocked in I/O wait for more than 143 seconds.
[  280.698121][ 
** replaying previous printk message **
[  280.698121][   T36]       Not tainted syzkaller #0
[  280.698134][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  280.698144][   T36] task:kworker/u8:8    state:D stack:20552 pid:167   tgid:167   ppid:2      task_flags:0x4248060 flags:0x00080000
[  280.698208][   T36] Workqueue: writeback wb_workfn (flush-8:0)
[  280.698249][   T36] Call Trace:
[  280.698256][   T36]  <TASK>
[  280.698271][   T36]  __schedule+0x17dd/0x5830
[  280.698300][   T36]  ? blk_mq_flush_plug_list+0x415/0x540
[  280.698338][   T36]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  280.698369][   T36]  ? __blk_flush_plug+0x416/0x4d0
[  280.698390][   T36]  ? __pfx___schedule+0x10/0x10
[  280.698426][   T36]  ? schedule+0x90/0x2b0
[  280.698456][   T36]  schedule+0x164/0x2b0
[  280.698484][   T36]  io_schedule+0x7f/0xd0
[  280.698513][   T36]  rq_qos_wait+0x266/0x360
[  280.698543][   T36]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  280.698564][   T36]  ? __pfx_wbt_cleanup_cb+0x10/0x10
[  280.698587][   T36]  ? __pfx_rq_qos_wait+0x10/0x10
[  280.698613][   T36]  ? __pfx_rq_qos_wake_function+0x10/0x10
[  280.698642][   T36]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  280.698686][   T36]  wbt_wait+0x326/0x550
[  280.698711][   T36]  ? __pfx_wbt_wait+0x10/0x10
[  280.698732][   T36]  ? __pfx_dd_bio_merge+0x10/0x10
[  280.698764][   T36]  ? __pfx_wbt_wait+0x10/0x10
[  280.698783][   T36]  __rq_qos_throttle+0x6b/0xb0
[  280.698811][   T36]  blk_mq_submit_bio+0x1697/0x2c40
[  280.698837][   T36]  ? blk_mq_submit_bio+0x490/0x2c40
[  280.698866][   T36]  ? __pfx_blk_mq_submit_bio+0x10/0x10
[  280.698886][   T36]  ? blk_cgroup_bio_start+0x5d7/0x670
[  280.698918][   T36]  ? __pfx_blk_cgroup_bio_start+0x10/0x10
[  280.698948][   T36]  ? __submit_bio+0x7e/0x340
[  280.698974][   T36]  submit_bio_noacct_nocheck+0x2fe/0xb10
[  280.699016][   T36]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  280.699071][   T36]  ext4_bio_write_folio+0x101a/0x18c0
[  280.699107][   T36]  mpage_process_page_bufs+0x6bd/0x8a0
[  280.699143][   T36]  mpage_prepare_extent_to_map+0xf8d/0x1880
[  280.699168][   T36]  ? process_scheduled_works+0xc3d/0x1630
[  280.699332][   T36]  ? __pfx_mpage_prepare_extent_to_map+0x10/0x10
[  280.699386][   T36]  ? kmem_cache_alloc_noprof+0x31a/0x600
[  280.699416][   T36]  ? ext4_init_io_end+0x29/0x130
[  280.699439][   T36]  ? kmem_cache_alloc_noprof+0x151/0x600
[  280.699465][   T36]  ? ext4_init_io_end+0x29/0x130
[  280.699497][   T36]  ext4_do_writepages+0xc08/0x44a0
[  280.699539][   T36]  ? __pfx_folio_batch_move_lru+0x10/0x10
[  280.699563][   T36]  ? blk_mq_submit_bio+0x1c65/0x2c40
[  280.699593][   T36]  ? __pfx_ext4_do_writepages+0x10/0x10
[  280.699615][   T36]  ? __lock_acquire+0x747/0x2de0
[  280.699640][   T36]  ? filemap_get_folios_tag+0x639/0x720
[  280.699670][   T36]  ? filemap_get_folios_tag+0x118/0x720
[  280.699694][   T36]  ? __pfx_filemap_get_folios_tag+0x10/0x10
[  280.699720][   T36]  ? lock_acquire+0x115/0x350
[  280.699755][   T36]  ext4_writepages+0x1fe/0x4e0
[  280.699776][   T36]  ? __pfx_ext4_writepages+0x10/0x10
[  280.699807][   T36]  ? do_raw_spin_unlock+0xf5/0x200
[  280.699823][   T36]  ? __pfx_ext4_writepages+0x10/0x10
[  280.699842][   T36]  do_writepages+0x338/0x560
[  280.699860][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  280.699878][   T36]  ? reacquire_held_locks+0x117/0x1a0
[  280.699901][   T36]  ? writeback_sb_inodes+0x450/0x1af0
[  280.699924][   T36]  __writeback_single_inode+0x136/0x1220
[  280.699946][   T36]  ? do_raw_spin_unlock+0xf5/0x200
[  280.699965][   T36]  writeback_sb_inodes+0x9de/0x1af0
[  280.700003][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  280.700057][   T36]  ? __pfx_down_read_trylock+0x10/0x10
[  280.700080][   T36]  ? __pfx___up_read+0x10/0x10
[  280.700101][   T36]  __writeback_inodes_wb+0x114/0x250
[  280.700125][   T36]  wb_writeback+0x42f/0xad0
[  280.700149][   T36]  ? queue_io+0x2d1/0x470
[  280.700170][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  280.700185][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  280.700211][   T36]  wb_workfn+0xc92/0x10f0
[  280.700238][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  280.700261][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  280.700281][   T36]  ? lock_acquire+0x115/0x350
[  280.700306][   T36]  ? rcu_is_watching+0x16/0xb0
[  280.700330][   T36]  ? process_scheduled_works+0x97a/0x1630
[  280.700353][   T36]  process_scheduled_works+0xc3d/0x1630
[  280.700397][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  280.700424][   T36]  ? assign_work+0x3cf/0x5d0
[  280.700450][   T36]  worker_thread+0xa47/0xfb0
[  280.700523][   T36]  kthread+0x38b/0x480
[  280.700541][   T36]  ? __pfx_worker_thread+0x10/0x10
[  280.700563][   T36]  ? __pfx_kthread+0x10/0x10
[  280.700581][   T36]  ret_from_fork+0x514/0xb70
[  280.700600][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  280.700617][   T36]  ? __switch_to+0xc78/0x1410
[  280.700694][   T36]  ? __pfx_kthread+0x10/0x10
[  280.700722][   T36]  ret_from_fork_asm+0x1a/0x30
[  280.700761][   T36]  </TASK>
[  280.700810][   T36] INFO: task jbd2/sda1-8:4968 blocked in I/O wait for more than 143 seconds.
[  280.700822][   T36]       Not tainted syzkaller #0
[  280.700830][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  280.700837][   T36] task:jbd2/sda1-8     state:D stack:25992 pid:4968  tgid:4968  ppid:2      task_flags:0x240040 flags:0x00080000
[  280.700885][   T36] Call Trace:
[  280.700890][   T36]  <TASK>
[  280.700898][   T36]  __schedule+0x17dd/0x5830
[  280.700928][   T36]  ? percpu_ref_put_many+0x18e/0x240
[  280.700949][   T36]  ? blk_mq_dispatch_list+0xd2c/0xe10
[  280.700969][   T36]  ? __pfx___schedule+0x10/0x10
[  280.700995][   T36]  ? schedule+0x90/0x2b0
[  280.701016][   T36]  schedule+0x164/0x2b0
[  280.701036][   T36]  io_schedule+0x7f/0xd0
[  280.701057][   T36]  bit_wait_io+0x13/0x110
[  280.701079][   T36]  __wait_on_bit+0xac/0x300
[  280.701099][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  280.701122][   T36]  out_of_line_wait_on_bit+0x13b/0x190
[  280.701148][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  280.701169][   T36]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  280.701192][   T36]  ? __pfx_wake_bit_function+0x10/0x10
[  280.701220][   T36]  ? __wait_on_buffer+0xe/0x80
[  280.701239][   T36]  jbd2_journal_commit_transaction+0x2f6e/0x5c80
[  280.701264][   T36]  ? __pfx_thread_stack_free_rcu+0x10/0x10
[  280.701308][   T36]  ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[  280.701340][   T36]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  280.701374][   T36]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  280.701394][   T36]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  280.701413][   T36]  ? __timer_delete_sync+0x4a7/0x520
[  280.701438][   T36]  kjournald2+0x3bc/0x740
[  280.701468][   T36]  ? __pfx_kjournald2+0x10/0x10
[  280.701486][   T36]  ? __pfx_autoremove_wake_function+0x10/0x10
[  280.701512][   T36]  ? __kthread_parkme+0x71/0x1f0
[  280.701529][   T36]  ? __kthread_parkme+0x199/0x1f0
[  280.701548][   T36]  kthread+0x38b/0x480
[  280.701566][   T36]  ? __pfx_kjournald2+0x10/0x10
[  280.701583][   T36]  ? __pfx_kthread+0x10/0x10
[  280.701602][   T36]  ret_from_fork+0x514/0xb70
[  280.701622][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  280.701640][   T36]  ? __switch_to+0xc78/0x1410
[  280.701669][   T36]  ? __pfx_kthread+0x10/0x10
[  280.701688][   T36]  ret_from_fork_asm+0x1a/0x30
[  280.701717][   T36]  </TASK>
[  280.701729][   T36] INFO: task syz-executor:5627 blocked in I/O wait for more than 143 seconds.
[  280.701740][   T36]       Not tainted syzkaller #0
[  280.701747][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  280.701754][   T36] task:syz-executor    state:D stack:21000 pid:5627  tgid:5627  ppid:5626   task_flags:0x440100 flags:0x00080000
[  280.701794][   T36] Call Trace:
[  280.701799][   T36]  <TASK>
[  280.701808][   T36]  __schedule+0x17dd/0x5830
[  280.701836][   T36]  ? __lock_acquire+0x747/0x2de0
[  280.701865][   T36]  ? __pfx___schedule+0x10/0x10
[  280.701892][   T36]  ? schedule+0x90/0x2b0
[  280.701913][   T36]  schedule+0x164/0x2b0
[  280.701933][   T36]  io_schedule+0x7f/0xd0
[  280.701953][   T36]  bit_wait_io+0x13/0x110
[  280.701975][   T36]  __wait_on_bit+0xac/0x300
[  280.701995][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  280.702018][   T36]  out_of_line_wait_on_bit+0x13b/0x190
[  280.702048][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  280.702068][   T36]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  280.702109][   T36]  ? __pfx_wake_bit_function+0x10/0x10
[  280.702143][   T36]  do_get_write_access+0x658/0x10c0
[  280.702206][   T36]  jbd2_journal_get_write_access+0x1d7/0x230
[  280.702232][   T36]  __ext4_journal_get_write_access+0xec/0x620
[  280.702264][   T36]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  280.702291][   T36]  ? trace_kmem_cache_alloc+0x29/0xe0
[  280.702309][   T36]  ? jbd2__journal_start+0x145/0x5d0
[  280.702337][   T36]  ext4_reserve_inode_write+0x294/0x360
[  280.702362][   T36]  __ext4_mark_inode_dirty+0x141/0x7e0
[  280.702392][   T36]  ext4_dirty_inode+0xd0/0x110
[  280.702409][   T36]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  280.702431][   T36]  __mark_inode_dirty+0x3a8/0x13b0
[  280.702452][   T36]  file_update_time_flags+0x399/0x440
[  280.702481][   T36]  ext4_page_mkwrite+0x21f/0x1470
[  280.702498][   T36]  ? __lock_acquire+0x747/0x2de0
[  280.702530][   T36]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  280.702552][   T36]  ? __lock_acquire+0x747/0x2de0
[  280.702579][   T36]  do_page_mkwrite+0x147/0x310
[  280.702603][   T36]  do_wp_page+0x1a85/0x4b80
[  280.702643][   T36]  ? __pfx_do_wp_page+0x10/0x10
[  280.702671][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  280.702690][   T36]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  280.702714][   T36]  handle_mm_fault+0x19c9/0x2f80
[  280.702739][   T36]  ? handle_mm_fault+0xee/0x2f80
[  280.702769][   T36]  ? __pfx_handle_mm_fault+0x10/0x10
[  280.702785][   T36]  ? lock_vma_under_rcu+0x45a/0x500
[  280.702800][   T36]  ? __pfx_set_user_sigmask+0x10/0x10
[  280.702841][   T36]  do_user_addr_fault+0xb35/0x1480
[  280.702871][   T36]  ? trace_page_fault_user+0x84/0x1e0
[  280.702893][   T36]  exc_page_fault+0x6a/0xc0
[  280.702915][   T36]  asm_exc_page_fault+0x26/0x30
[  280.702933][   T36] RIP: 0033:0x7f9b1236e687
[  280.702956][   T36] RSP: 002b:00007ffd438765b8 EFLAGS: 00010206
[  280.702970][   T36] RAX: 00007f9b0fe00000 RBX: 00005555759225f0 RCX: 0000000000002639
[  280.702981][   T36] RDX: 0000000000004639 RSI: 000055557598d110 RDI: 00007f9b0fe02000
[  280.702992][   T36] RBP: 00007ffd438765d0 R08: 00007f9b0fe00000 R09: 0000000000000000
[  280.703003][   T36] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555575914720
[  280.703013][   T36] R13: 000000000000000d R14: 0000000000000001 R15: 0000000000000000
[  280.703037][   T36]  </TASK>
[  280.703068][   T36] INFO: task syz.5.387:7019 blocked in I/O wait for more than 143 seconds.
[  280.703079][   T36]       Not tainted syzkaller #0
[  280.703087][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  280.703093][   T36] task:syz.5.387       state:D stack:25608 pid:7019  tgid:7019  ppid:6028   task_flags:0x440040 flags:0x00080002
[  280.703140][   T36] Call Trace:
[  280.703204][   T36]  <TASK>
[  280.703219][   T36]  __schedule+0x17dd/0x5830
[  280.703255][   T36]  ? lock_acquire+0x115/0x350
[  280.703285][   T36]  ? __pfx___schedule+0x10/0x10
[  280.703313][   T36]  ? schedule+0x90/0x2b0
[  280.703334][   T36]  schedule+0x164/0x2b0
[  280.703355][   T36]  io_schedule+0x7f/0xd0
[  280.703376][   T36]  bit_wait_io+0x13/0x110
[  280.703399][   T36]  __wait_on_bit+0xac/0x300
[  280.703420][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  280.703443][   T36]  out_of_line_wait_on_bit+0x13b/0x190
[  280.703466][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  280.703487][   T36]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  280.703512][   T36]  ? __pfx_wake_bit_function+0x10/0x10
[  280.703545][   T36]  do_get_write_access+0x658/0x10c0
[  280.703582][   T36]  jbd2_journal_get_write_access+0x1d7/0x230
[  280.703608][   T36]  __ext4_journal_get_write_access+0xec/0x620
[  280.703657][   T36]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  280.703684][   T36]  ? trace_kmem_cache_alloc+0x29/0xe0
[  280.703702][   T36]  ? jbd2__journal_start+0x145/0x5d0
[  280.703730][   T36]  ext4_reserve_inode_write+0x294/0x360
[  280.703754][   T36]  __ext4_mark_inode_dirty+0x141/0x7e0
[  280.703785][   T36]  ext4_dirty_inode+0xd0/0x110
[  280.703802][   T36]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  280.703819][   T36]  __mark_inode_dirty+0x3a8/0x13b0
[  280.703839][   T36]  file_update_time_flags+0x399/0x440
[  280.703872][   T36]  ext4_page_mkwrite+0x21f/0x1470
[  280.703898][   T36]  ? __pfx_filemap_fault+0x10/0x10
[  280.703925][   T36]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  280.703951][   T36]  do_page_mkwrite+0x147/0x310
[  280.703975][   T36]  do_pte_missing+0x70f/0x3570
[  280.704003][   T36]  ? handle_mm_fault+0xee/0x2f80
[  280.704022][   T36]  handle_mm_fault+0x1807/0x2f80
[  280.704047][   T36]  ? handle_mm_fault+0xee/0x2f80
[  280.704070][   T36]  ? __pfx_handle_mm_fault+0x10/0x10
[  280.704084][   T36]  ? lock_vma_under_rcu+0x45a/0x500
[  280.704119][   T36]  do_user_addr_fault+0xb35/0x1480
[  280.704152][   T36]  ? trace_page_fault_user+0x84/0x1e0
[  280.704174][   T36]  exc_page_fault+0x6a/0xc0
[  280.704196][   T36]  asm_exc_page_fault+0x26/0x30
[  280.704212][   T36] RIP: 0033:0x7fd138474332
[  280.704226][   T36] RSP: 002b:00007ffde79965b0 EFLAGS: 00010202
[  280.704241][   T36] RAX: 0000000000002008 RBX: 00007fd139355720 RCX: 0000000000000000
[  280.704252][   T36] RDX: 0000001b34c22000 RSI: 0000000000000008 RDI: 00007fd139355720
[  280.704263][   T36] RBP: 0000000000000078 R08: 00007fd138810000 R09: 00007fd138826038
[  280.704274][   T36] R10: 0000000000000001 R11: 0000000000000002 R12: ffffffff817023c1
[  280.704284][   T36] R13: 00007fd138826038 R14: 0000000000000076 R15: ffffffffffffe000
[  280.704297][   T36]  ? arch_scale_cpu_capacity+0x11/0xb0
[  280.704329][   T36]  </TASK>
[  280.704337][   T36] INFO: task syz.1.389:7025 blocked in I/O wait for more than 143 seconds.
[  280.704350][   T36]       Not tainted syzkaller #0
[  280.704357][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  280.704364][   T36] task:syz.1.389       state:D stack:26936 pid:7025  tgid:7025  ppid:5639   task_flags:0x440040 flags:0x00080002
[  280.704425][   T36] Call Trace:
[  280.704430][   T36]  <TASK>
[  280.704438][   T36]  __schedule+0x17dd/0x5830
[  280.704474][   T36]  ? is_bpf_text_address+0x26/0x2b0
[  280.704493][   T36]  ? __pfx___schedule+0x10/0x10
[  280.704520][   T36]  ? schedule+0x90/0x2b0
[  280.704540][   T36]  schedule+0x164/0x2b0
[  280.704561][   T36]  io_schedule+0x7f/0xd0
[  280.704581][   T36]  bit_wait_io+0x13/0x110
[  280.704602][   T36]  __wait_on_bit+0xac/0x300
[  280.704622][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  280.704651][   T36]  out_of_line_wait_on_bit+0x13b/0x190
[  280.704673][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  280.704693][   T36]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  280.704716][   T36]  ? __pfx_wake_bit_function+0x10/0x10
[  280.704748][   T36]  do_get_write_access+0x658/0x10c0
[  280.704783][   T36]  jbd2_journal_get_write_access+0x1d7/0x230
[  280.704807][   T36]  __ext4_journal_get_write_access+0xec/0x620
[  280.704838][   T36]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  280.704875][   T36]  ext4_reserve_inode_write+0x294/0x360
[  280.704898][   T36]  __ext4_mark_inode_dirty+0x141/0x7e0
[  280.704927][   T36]  ext4_dirty_inode+0xd0/0x110
[  280.704944][   T36]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  280.704959][   T36]  __mark_inode_dirty+0x3a8/0x13b0
[  280.704974][   T36]  ? mnt_get_write_access+0x216/0x280
[  280.704999][   T36]  ? ext4_file_mmap_prepare+0x277/0x450
[  280.705022][   T36]  touch_atime+0x568/0x670
[  280.705044][   T36]  ? ext4_file_mmap_prepare+0x277/0x450
[  280.705071][   T36]  ext4_file_mmap_prepare+0x277/0x450
[  280.705098][   T36]  mmap_region+0xef9/0x2840
[  280.705123][   T36]  ? __update_page_owner_handle+0x5a/0x580
[  280.705157][   T36]  ? __update_page_owner_handle+0x5a/0x580
[  280.705186][   T36]  ? lock_acquire+0x115/0x350
[  280.705207][   T36]  ? __page_table_check_zero+0x6c/0x430
[  280.705233][   T36]  ? __pfx_mmap_region+0x10/0x10
[  280.705258][   T36]  ? __page_table_check_zero+0x6c/0x430
[  280.705285][   T36]  ? __page_table_check_zero+0x6c/0x430
[  280.705309][   T36]  ? __page_table_check_zero+0x3c3/0x430
[  280.705332][   T36]  ? __page_table_check_zero+0x6c/0x430
[  280.705376][   T36]  ? lock_acquire+0x115/0x350
[  280.705448][   T36]  ? mt_find+0x186/0x630
[  280.705475][   T36]  ? mt_find+0x5ff/0x630
[  280.705501][   T36]  ? mt_find+0x186/0x630
[  280.705524][   T36]  ? __pfx_mt_find+0x10/0x10
[  280.705553][   T36]  ? bpf_lsm_mmap_addr+0x9/0x50
[  280.705575][   T36]  ? security_mmap_addr+0x71/0x240
[  280.705598][   T36]  ? shmem_mapping+0xd/0x50
[  280.705614][   T36]  ? memfd_check_seals_mmap+0xc5/0x220
[  280.705639][   T36]  do_mmap+0xe0a/0x1300
[  280.705671][   T36]  ? __pfx_do_mmap+0x10/0x10
[  280.705704][   T36]  ? vm_mmap_pgoff+0x1ed/0x520
[  280.705722][   T36]  ? down_write_killable+0x179/0x230
[  280.705746][   T36]  ? lock_acquire+0x115/0x350
[  280.705766][   T36]  ? __pfx_down_write_killable+0x10/0x10
[  280.705789][   T36]  ? apparmor_mmap_file+0x2e7/0x390
[  280.705814][   T36]  vm_mmap_pgoff+0x27a/0x520
[  280.705840][   T36]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  280.705861][   T36]  ? __fget_files+0x2a/0x420
[  280.705883][   T36]  ? __fget_files+0x3a2/0x420
[  280.705902][   T36]  ? __fget_files+0x2a/0x420
[  280.705925][   T36]  ksys_mmap_pgoff+0x4dc/0x760
[  280.705945][   T36]  do_syscall_64+0x166/0x520
[  280.705965][   T36]  ? trace_irq_disable+0x3b/0x140
[  280.705987][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.706003][   T36]  ? clear_bhb_loop+0x70/0xc0
[  280.706022][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.706038][   T36] RIP: 0033:0x7f7bd4f9f2c2
[  280.706050][   T36] RSP: 002b:00007fff1a5b3858 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  280.706065][   T36] RAX: ffffffffffffffda RBX: 0000001b2cd64000 RCX: 00007f7bd4f9f2c2
[  280.706076][   T36] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b2cd64000
[  280.706086][   T36] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  280.706096][   T36] R10: 0000000000100001 R11: 0000000000000206 R12: 000000000000005d
[  280.706106][   T36] R13: 00000000000927c0 R14: 000000000001f8da R15: 00007fff1a5b3b30
[  280.706131][   T36]  </TASK>
[  280.706137][   T36] INFO: task syz.4.385:7026 blocked in I/O wait for more than 143 seconds.
[  280.706148][   T36]       Not tainted syzkaller #0
[  280.706156][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  280.706162][   T36] task:syz.4.385       state:D stack:26936 pid:7026  tgid:7026  ppid:5637   task_flags:0x440040 flags:0x00080002
[  280.706208][   T36] Call Trace:
[  280.706213][   T36]  <TASK>
[  280.706221][   T36]  __schedule+0x17dd/0x5830
[  280.706262][   T36]  ? __pfx___schedule+0x10/0x10
[  280.706289][   T36]  ? schedule+0x90/0x2b0
[  280.706310][   T36]  schedule+0x164/0x2b0
[  280.706330][   T36]  io_schedule+0x7f/0xd0
[  280.706351][   T36]  bit_wait_io+0x13/0x110
[  280.706373][   T36]  __wait_on_bit+0xac/0x300
[  280.706392][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  280.706416][   T36]  out_of_line_wait_on_bit+0x13b/0x190
[  280.706437][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  280.706458][   T36]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  280.706481][   T36]  ? __pfx_wake_bit_function+0x10/0x10
[  280.706513][   T36]  do_get_write_access+0x658/0x10c0
[  280.706548][   T36]  jbd2_journal_get_write_access+0x1d7/0x230
[  280.706573][   T36]  __ext4_journal_get_write_access+0xec/0x620
[  280.706603][   T36]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  280.706642][   T36]  ext4_reserve_inode_write+0x294/0x360
[  280.706665][   T36]  __ext4_mark_inode_dirty+0x141/0x7e0
[  280.706694][   T36]  ext4_dirty_inode+0xd0/0x110
[  280.706711][   T36]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  280.706727][   T36]  __mark_inode_dirty+0x3a8/0x13b0
[  280.706741][   T36]  ? mnt_get_write_access+0x216/0x280
[  280.706766][   T36]  ? ext4_file_mmap_prepare+0x277/0x450
[  280.706789][   T36]  touch_atime+0x568/0x670
[  280.706811][   T36]  ? ext4_file_mmap_prepare+0x277/0x450
[  280.706838][   T36]  ext4_file_mmap_prepare+0x277/0x450
[  280.706865][   T36]  mmap_region+0xef9/0x2840
[  280.706889][   T36]  ? __update_page_owner_handle+0x5a/0x580
[  280.706917][   T36]  ? __update_page_owner_handle+0x5a/0x580
[  280.706966][   T36]  ? lock_acquire+0x115/0x350
[  280.706987][   T36]  ? __page_table_check_zero+0x6c/0x430
[  280.707014][   T36]  ? __pfx_mmap_region+0x10/0x10
[  280.707039][   T36]  ? __page_table_check_zero+0x6c/0x430
[  280.707067][   T36]  ? __page_table_check_zero+0x6c/0x430
[  280.707091][   T36]  ? __page_table_check_zero+0x3c3/0x430
[  280.707115][   T36]  ? __page_table_check_zero+0x6c/0x430
[  280.707163][   T36]  ? lock_acquire+0x115/0x350
[  280.707238][   T36]  ? mt_find+0x186/0x630
[  280.707265][   T36]  ? mt_find+0x5ff/0x630
[  280.707292][   T36]  ? mt_find+0x186/0x630
[  280.707316][   T36]  ? __pfx_mt_find+0x10/0x10
[  280.707346][   T36]  ? bpf_lsm_mmap_addr+0x9/0x50
[  280.707368][   T36]  ? security_mmap_addr+0x71/0x240
[  280.707391][   T36]  ? shmem_mapping+0xd/0x50
[  280.707407][   T36]  ? memfd_check_seals_mmap+0xc5/0x220
[  280.707429][   T36]  do_mmap+0xe0a/0x1300
[  280.709533][   T36]  ? __pfx_do_mmap+0x10/0x10
[  280.709686][   T36]  ? vm_mmap_pgoff+0x1ed/0x520
[  280.709753][   T36]  ? down_write_killable+0x179/0x230
[  280.709845][   T36]  ? lock_acquire+0x115/0x350
[  280.709912][   T36]  ? __pfx_down_write_killable+0x10/0x10
[  280.710015][   T36]  ? apparmor_mmap_file+0x2e7/0x390
[  280.710098][   T36]  vm_mmap_pgoff+0x27a/0x520
[  280.710183][   T36]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  280.710255][   T36]  ? __fget_files+0x2a/0x420
[  280.710338][   T36]  ? __fget_files+0x3a2/0x420
[  280.710406][   T36]  ? __fget_files+0x2a/0x420
[  280.710481][   T36]  ksys_mmap_pgoff+0x4dc/0x760
[  280.710558][   T36]  do_syscall_64+0x166/0x520
[  280.710624][   T36]  ? trace_irq_disable+0x3b/0x140
[  280.710725][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.712287][   T36]  ? clear_bhb_loop+0x70/0xc0
[  280.712477][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.712531][   T36] RIP: 0033:0x7fdb2d59f2c2
[  280.712581][   T36] RSP: 002b:00007ffe625ef378 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  280.712649][   T36] RAX: ffffffffffffffda RBX: 0000001b2d064000 RCX: 00007fdb2d59f2c2
[  280.712684][   T36] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b2d064000
[  280.712710][   T36] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  280.712741][   T36] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000057
[  280.712779][   T36] R13: 00000000000927c0 R14: 000000000001f796 R15: 00007ffe625ef650
[  280.712861][   T36]  </TASK>
[  280.712901][   T36] 
[  280.712901][   T36] Showing all locks held in the system:
[  280.712939][   T36] locks held by pr/ttyS0/35: 2, last CPU#1:
[  280.712979][   T36]  #0: ffffffff90033f18 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  280.713139][   T36]  #1: ffffffff9c203ef8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  280.713315][   T36] locks held by khungtaskd/36: 1, last CPU#0:
[  280.713348][   T36]  #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  280.713522][   T36] locks held by kworker/u8:8/167: 4, on CPU#1:
[  280.713561][   T36]  #0: ffff888021ae3948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  280.713868][   T36]  #1: ffffc90003007c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  280.714005][   T36]  #2: ffff88807ffb6100 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  280.714157][   T36]  #3: ffff88807ff94cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0
[  280.714349][   T36] locks held by getty/5395: 2, on CPU#0:
[  280.714390][   T36]  #0: ffff888036f420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  280.714527][   T36]  #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  280.714681][   T36] locks held by syz-executor/5627: 3, on CPU#0:
[  280.714715][   T36]  #0: ffff88807789f308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  280.714888][   T36]  #1: ffff88807ffb6570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  280.715019][   T36]  #2: ffff88807fe4c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  280.715193][   T36] locks held by syz.5.387/7019: 3, on CPU#0:
[  280.715227][   T36]  #0: ffff888056b38308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  280.715351][   T36]  #1: ffff88807ffb6570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  280.715482][   T36]  #2: ffff88807fe4c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  280.715638][   T36] locks held by syz.1.389/7025: 3, on CPU#1:
[  280.715670][   T36]  #0: ffff88807ef04cc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520
[  280.715802][   T36]  #1: ffff88807ffb6478 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  280.715999][   T36]  #2: ffff88807fe4c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  280.716132][   T36] locks held by syz.4.385/7026: 3, on CPU#1:
[  280.716174][   T36]  #0: ffff88813fe36540 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520
[  280.716318][   T36]  #1: ffff88807ffb6478 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  280.716489][   T36]  #2: ffff88807fe4c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  280.716548][   T36] 
[  280.716554][   T36] =============================================
[  280.716554][   T36] 
[  280.716570][   T36] NMI backtrace for cpu 0
[  280.716590][   T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  280.716617][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  280.716650][   T36] Call Trace:
[  280.716659][   T36]  <TASK>
[  280.716668][   T36]  dump_stack_lvl+0xe8/0x150
[  280.716705][   T36]  nmi_cpu_backtrace+0x274/0x2d0
[  280.716731][   T36]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  280.716755][   T36]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  280.716782][   T36]  sys_info+0x135/0x170
[  280.716800][   T36]  watchdog+0x1073/0x10f0
[  280.716838][   T36]  ? watchdog+0x209/0x10f0
[  280.716875][   T36]  kthread+0x38b/0x480
[  280.716902][   T36]  ? __pfx_watchdog+0x10/0x10
[  280.716929][   T36]  ? __pfx_kthread+0x10/0x10
[  280.716956][   T36]  ret_from_fork+0x514/0xb70
[  280.716984][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  280.717009][   T36]  ? __switch_to+0xc78/0x1410
[  280.717046][   T36]  ? __pfx_kthread+0x10/0x10
[  280.717072][   T36]  ret_from_fork_asm+0x1a/0x30
[  280.717113][   T36]  </TASK>
[  280.717121][   T36] Sending NMI from CPU 0 to CPUs 1:
[  280.717157][    C1] NMI backtrace for cpu 1
[  280.717173][    C1] CPU: 1 UID: 0 PID: 4994 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) 
[  280.717196][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  280.717206][    C1] RIP: 0010:lock_is_held_type+0x2f/0x150
[  280.717234][    C1] Code: 41 57 41 56 41 55 41 54 53 bb ff ff ff ff 83 3d 96 61 b9 05 00 0f 84 e4 00 00 00 65 8b 05 51 cf dc 08 85 c0 0f 85 d5 00 00 00 <65> 4c 8b 2d 91 87 dc 08 41 83 bd a4 0b 00 00 00 0f 85 bf 00 00 00
[  280.717250][    C1] RSP: 0018:ffffc90002fd7528 EFLAGS: 00000246
[  280.717265][    C1] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 8000000000000001
[  280.717278][    C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff9015a420
[  280.717291][    C1] RBP: 0000000000000003 R08: ffffffff824c2ddc R09: 0000000000000000
[  280.717303][    C1] R10: dffffc0000000000 R11: ffffed100aa76296 R12: 0000000000044718
[  280.717316][    C1] R13: dffffc0000000000 R14: ffff88813ff70118 R15: 0000000000001000
[  280.717398][    C1] FS:  00007fc3b650fc80(0000) GS:ffff88812350b000(0000) knlGS:0000000000000000
[  280.717414][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  280.717427][    C1] CR2: 0000555c7fba9168 CR3: 000000007ea74000 CR4: 00000000003526f0
[  280.717448][    C1] Call Trace:
[  280.717455][    C1]  <TASK>
[  280.717466][    C1]  page_ext_lookup+0xe7/0x180
[  280.717503][    C1]  ? __page_table_check_zero+0x6c/0x430
[  280.717534][    C1]  __page_table_check_zero+0x16b/0x430
[  280.717563][    C1]  ? __reset_page_owner+0x195/0x2a0
[  280.717593][    C1]  __free_frozen_pages+0xca7/0xd90
[  280.717621][    C1]  __slab_free+0x269/0x2c0
[  280.717651][    C1]  ? qlist_free_all+0x8e/0x100
[  280.717677][    C1]  qlist_free_all+0x99/0x100
[  280.717702][    C1]  kasan_quarantine_reduce+0x148/0x160
[  280.717729][    C1]  __kasan_slab_alloc+0x22/0x80
[  280.717757][    C1]  __kmalloc_node_track_caller_noprof+0x446/0x720
[  280.717783][    C1]  ? __kmalloc_node_track_caller_noprof+0x2e6/0x720
[  280.717807][    C1]  ? alloc_skb_with_frags+0xc6/0x760
[  280.717827][    C1]  ? alloc_skb_with_frags+0xc6/0x760
[  280.717851][    C1]  __alloc_skb+0x2c1/0x7a0
[  280.717872][    C1]  alloc_skb_with_frags+0xc6/0x760
[  280.717894][    C1]  ? kasan_save_track+0x4f/0x80
[  280.717919][    C1]  ? kasan_save_track+0x3e/0x80
[  280.717943][    C1]  ? kasan_save_free_info+0x40/0x50
[  280.717963][    C1]  ? __kasan_slab_free+0x5c/0x80
[  280.717991][    C1]  sock_alloc_send_pskb+0xc69/0xd90
[  280.718027][    C1]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  280.718070][    C1]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  280.718098][    C1]  unix_dgram_sendmsg+0x4ff/0x17e0
[  280.718121][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  280.718153][    C1]  ? kfree+0x1c5/0x650
[  280.718171][    C1]  ? syslog_print+0x577/0x610
[  280.718202][    C1]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  280.718226][    C1]  ? aa_sock_msg_perm+0x129/0x210
[  280.718258][    C1]  ? apparmor_socket_sendmsg+0x98/0x360
[  280.718284][    C1]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  280.718305][    C1]  sock_sendmsg_nosec+0x14e/0x190
[  280.718333][    C1]  __sys_sendto+0x408/0x5a0
[  280.718351][    C1]  ? bpf_lsm_capable+0x9/0x20
[  280.718371][    C1]  ? __pfx___sys_sendto+0x10/0x10
[  280.718403][    C1]  ? rcu_is_watching+0x16/0xb0
[  280.718435][    C1]  __x64_sys_sendto+0xde/0x100
[  280.718455][    C1]  do_syscall_64+0x166/0x520
[  280.718478][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.718497][    C1]  ? clear_bhb_loop+0x70/0xc0
[  280.718518][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.718535][    C1] RIP: 0033:0x7fc3b665f407
[  280.718550][    C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  280.718565][    C1] RSP: 002b:00007ffec88c8f90 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[  280.718582][    C1] RAX: ffffffffffffffda RBX: 00007fc3b650fc80 RCX: 00007fc3b665f407
[  280.718596][    C1] RDX: 000000000000007c RSI: 00007ffec88c90d0 RDI: 0000000000000003
[  280.718607][    C1] RBP: 00007ffec88c9500 R08: 0000000000000000 R09: 0000000000000000
[  280.718618][    C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffec88c9518
[  280.718631][    C1] R13: 00007ffec88c90d0 R14: 0000000000000061 R15: 00007ffec88c90d0
[  280.718653][    C1]  </TASK>
[  280.719205][   T36] Kernel panic - not syncing: hung_task: blocked tasks
[  283.652482][   T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  283.661612][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  283.671685][   T36] Call Trace:
[  283.674986][   T36]  <TASK>
[  283.677935][   T36]  vpanic+0x26f/0x710
[  283.681943][   T36]  panic+0xc5/0xd0
[  283.685682][   T36]  ? __pfx_panic+0x10/0x10
[  283.690121][   T36]  ? wq_watchdog_touch+0xf9/0x160
[  283.695183][   T36]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  283.701354][   T36]  watchdog+0x10e7/0x10f0
[  283.705713][   T36]  ? watchdog+0x209/0x10f0
[  283.710158][   T36]  kthread+0x38b/0x480
[  283.714272][   T36]  ? __pfx_watchdog+0x10/0x10
[  283.718970][   T36]  ? __pfx_kthread+0x10/0x10
[  283.723598][   T36]  ret_from_fork+0x514/0xb70
[  283.728213][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  283.733344][   T36]  ? __switch_to+0xc78/0x1410
[  283.738054][   T36]  ? __pfx_kthread+0x10/0x10
[  283.742684][   T36]  ret_from_fork_asm+0x1a/0x30
[  283.747503][   T36]  </TASK>
[  283.751515][   T36] Kernel Offset: disabled
[  283.755868][   T36] Rebooting in 86400 seconds..