last executing test programs:

6.632132962s ago: executing program 2 (id=1742):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000000)='./file0\x00', 0x1214c91, &(0x7f0000000f00)=ANY=[], 0xfe, 0x879, &(0x7f0000001880)="$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")
chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00')
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)

6.109832793s ago: executing program 2 (id=1746):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000280)={0x4, 0x0, [{0xaf2, 0x0, 0x4}, {0x244, 0x0, 0x4}, {0x9f7, 0x0, 0x10000}, {0x385, 0x0, 0x1}]})

5.533342459s ago: executing program 2 (id=1752):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000)
unshare(0x22020600)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

4.776281784s ago: executing program 2 (id=1757):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x28, 0x0, [{0xc0000100, 0x0, 0x80000000001af}]})

4.732908751s ago: executing program 0 (id=1758):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1, 0x5518, &(0x7f000000adc0)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

4.359378382s ago: executing program 2 (id=1761):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x9, 0x2)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.789297156s ago: executing program 1 (id=1765):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1f}}]}, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf251000000008000100", @ANYRES32, @ANYBLOB="050010"], 0x44}, 0x1, 0x0, 0x0, 0x8854}, 0x24000040)

3.59444005s ago: executing program 1 (id=1767):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

3.325501223s ago: executing program 1 (id=1770):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
gettimeofday(0xfffffffffffffffe, 0x0)

2.950006281s ago: executing program 0 (id=1774):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xf, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x8000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x9, 0x400}, 0x8)

2.777839132s ago: executing program 3 (id=1776):
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)

2.322551514s ago: executing program 4 (id=1779):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3ff}, &(0x7f0000000040)=0x8)

2.115145775s ago: executing program 4 (id=1780):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000440)={@broadcast, @random="5aeadd61229e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "af34000000000000"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0)

1.954525671s ago: executing program 4 (id=1781):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0)

1.781586336s ago: executing program 1 (id=1782):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000059e000/0x400000)=nil)

1.719214693s ago: executing program 0 (id=1783):
r0 = fanotify_init(0x10, 0x8000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x455, 0x8000000, r1, 0x0)
fanotify_mark(r0, 0x7e, 0x800003a, r1, 0x0)

1.555929398s ago: executing program 1 (id=1784):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x1000000, &(0x7f00000059c0)=ANY=[], 0x5, 0x5513, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x109142, 0x39)
pwrite64(r0, &(0x7f0000000100)='\n', 0x1, 0x8000c5b)
fallocate(r0, 0x10, 0x4000, 0x4000)

1.536131002s ago: executing program 0 (id=1785):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})

1.464966934s ago: executing program 3 (id=1786):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0xc0010140, 0x0, 0xfffffffffffffff8}]})

1.228138s ago: executing program 0 (id=1787):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpid()
kcmp(r0, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)

1.027268779s ago: executing program 3 (id=1788):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x28, r0, 0x801, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x28}}, 0x0)

993.243481ms ago: executing program 0 (id=1789):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b24a4bcdc33b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d12afdb295ce2edecb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde31469c4aea0c64850eb3f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c29fbab7d04d73a381c296af344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd4ef7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76b2e9a674448f3ee2cd29707484df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e3d5cba447c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000000000000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058c35febda26a43bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a97769e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab814761819b0fc517239a6777dbb92a7462538dbd8a4b82f87df7982b44b160a598c75bafa5a9b388a44303dbebc83ac2ad2da3ae80c851bc2fdb8d444597fdac4538aa33bb9204ffe534b15a1878be30157d0815d38fc2effeb7b87d6bd15e21c7b7c7d1ad7b3fd69b4bd06716a203e82f4c0413719eae0967fc70f03570375c2d0986b0200897e505afb87b878f3e13187001bba6a401bd56f3f8eb5384e33"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000a0000007b2ac0ff00000000632ac8ff00000000b70200000001010abfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

871.010732ms ago: executing program 3 (id=1790):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={&(0x7f00000008c0)="e364a16e5fbbf00009", &(0x7f00000026c0)=""/17, &(0x7f0000002700)="3666a5b1f6144abf9e132ae4a72bd9a36285a1333d9c10052ecf6374296f6945a3", &(0x7f0000002740)="56feeb906a3b236361b1ab8bd3cb71e60770414ea091f269426f22f4417a9c9dcbe9fc9a2db52283189151461ee3e24d5d64cc8e5b8dc1ebd7dc1b059c0d33b541cadd93e9882f22d69c7b00b21d5a61c8ad6f90cc0a284973586e4deda1358282a7ecfc3a018f10c2", 0x800, r0}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

774.243723ms ago: executing program 2 (id=1791):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nodiscard}, {@barrier}]}, 0xfe, 0x559a, &(0x7f00000144c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106)
syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@multicast2, 0x6}]}, @ssrr={0x89, 0x7, 0x77, [@multicast2]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[])

694.258717ms ago: executing program 4 (id=1792):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

579.484638ms ago: executing program 3 (id=1793):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0)

509.20659ms ago: executing program 4 (id=1794):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x291, &(0x7f00000012c0)="$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")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1)
pwrite64(r0, &(0x7f0000000080), 0xfdcf, 0x404042ffe)

216.988361ms ago: executing program 4 (id=1795):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000000c0), 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)

24.452077ms ago: executing program 1 (id=1796):
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1ff, 0xacd43)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)

0s ago: executing program 3 (id=1797):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x28e, 0x0, 0x6}]})

kernel console output (not intermixed with test programs):

4-1:0.0: GPIO initialisation failed: -71
[  173.839541][   T10] usb 4-1: cp210x converter now attached to ttyUSB0
[  173.851924][ T5720] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  173.867348][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  173.867376][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.871808][   T10] usb 4-1: USB disconnect, device number 10
[  173.913614][ T5720] usb 2-1: config 0 descriptor??
[  173.919165][ T8368] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  173.966822][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  173.986136][   T10] cp210x 4-1:0.0: device disconnected
[  174.202720][ T8386] netlink: 160 bytes leftover after parsing attributes in process `syz.4.886'.
[  174.421306][ T5720] hid_parser_main: 11 callbacks suppressed
[  174.421323][ T5720] uclogic 0003:5543:0064.0004: unknown main item tag 0x0
[  174.421341][ T5720] uclogic 0003:5543:0064.0004: unknown main item tag 0x0
[  174.421356][ T5720] uclogic 0003:5543:0064.0004: unknown main item tag 0x0
[  174.421370][ T5720] uclogic 0003:5543:0064.0004: unknown main item tag 0x0
[  174.421385][ T5720] uclogic 0003:5543:0064.0004: unknown main item tag 0x0
[  174.421399][ T5720] uclogic 0003:5543:0064.0004: unknown main item tag 0x0
[  174.421413][ T5720] uclogic 0003:5543:0064.0004: unknown main item tag 0x0
[  174.421428][ T5720] uclogic 0003:5543:0064.0004: unknown main item tag 0x0
[  174.488609][ T5720] uclogic 0003:5543:0064.0004: unknown main item tag 0x0
[  174.488637][ T5720] uclogic 0003:5543:0064.0004: unknown main item tag 0x0
[  174.517485][ T5720] uclogic 0003:5543:0064.0004: unexpected long global item
[  174.537622][ T5720] uclogic 0003:5543:0064.0004: parse failed
[  174.537681][ T5720] uclogic 0003:5543:0064.0004: probe with driver uclogic failed with error -22
[  174.595744][ T5720] usb 2-1: USB disconnect, device number 5
[  174.712694][ T8393] loop3: detected capacity change from 0 to 2048
[  174.845516][ T8393] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.934123][   T32] audit: type=1800 audit(1789137385.902:12): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.889" name="file1" dev="loop3" ino=1346 res=0 errno=0
[  175.297436][ T8407] program syz.1.896 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  175.347764][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'.
[  175.888396][ T8420] netlink: 'syz.4.901': attribute type 3 has an invalid length.
[  175.964247][    T9] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  176.088136][ T8413] loop0: detected capacity change from 0 to 32768
[  176.115948][    T9] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  176.118290][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  176.118304][    T9] usb 4-1: config 0 has no interface number 0
[  176.118325][    T9] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  176.118338][    T9] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.118348][    T9] usb 4-1: config 0 interface 1 has no altsetting 0
[  176.118366][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.183087][    T9] usb 4-1: config 0 descriptor??
[  176.211566][ T8413] JBD2: Ignoring recovery information on journal
[  176.279290][ T8413] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  176.588086][ T8432] loop1: detected capacity change from 0 to 1024
[  176.612515][ T8431] loop4: detected capacity change from 0 to 1024
[  176.648894][ T8432] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  176.649324][ T8432] System zones: 0-1, 3-8
[  176.674724][   T32] audit: type=1800 audit(1789137387.642:13): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.905" name="file1" dev="loop4" ino=20 res=0 errno=0
[  176.682474][ T8432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  176.682537][ T8432] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.775291][ T5631] ocfs2: Unmounting device (7,0) on (node local)
[  176.879465][    T9] input: HID 2179:0053 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:2179:0053.0005/input/input10
[  176.941036][ T1107] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 1)
[  176.983146][ T1107] EXT4-fs (loop1): Remounting filesystem read-only
[  176.994171][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  177.150368][    T9] uclogic 0003:2179:0053.0005: input,hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.3-1/input1
[  177.178639][    T9] usb 4-1: USB disconnect, device number 11
[  177.395868][ T8441] fido_id[8441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  177.832213][ T8459] loop0: detected capacity change from 0 to 512
[  177.862328][ T8459] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.914: corrupted in-inode xattr: invalid ea_ino
[  177.862349][ T8459] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  177.863223][ T8459] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.914: couldn't read orphan inode 15 (err -117)
[  177.863241][ T8459] loop0: lost filesystem error report for type 5 error -117
[  177.863686][    C0] EXT4-fs (loop0): error count since last fsck: 2
[  177.863699][    C0] EXT4-fs (loop0): initial error at time 1789137388: ext4_iget_extra_inode:5210: inode 15
[  177.863715][    C0] EXT4-fs (loop0): last error at time 1789137388: ext4_orphan_get:1408
[  177.880294][ T8459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.223315][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.234307][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  178.386447][   T10] usb 3-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[  178.388751][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.390473][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  178.390487][   T10] usb 3-1: Product: syz
[  178.390494][   T10] usb 3-1: Manufacturer: syz
[  178.461744][   T10] navman 3-1:1.0: navman converter detected
[  178.488487][ T8479] loop0: detected capacity change from 0 to 1024
[  178.529019][   T32] audit: type=1800 audit(1789137389.492:14): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.921" name="file1" dev="loop0" ino=20 res=0 errno=0
[  178.532676][   T10] usb 3-1: navman converter now attached to ttyUSB0
[  178.702532][   T10] usb 3-1: USB disconnect, device number 4
[  178.745015][   T10] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  178.745343][   T10] navman 3-1:1.0: device disconnected
[  179.270196][ T8502] loop1: detected capacity change from 0 to 256
[  179.667670][ T8510] loop2: detected capacity change from 0 to 2048
[  179.720487][ T8510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.811363][ T8510] EXT4-fs (loop2): shut down requested (1)
[  179.896734][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.220578][ T8532] loop2: detected capacity change from 0 to 1024
[  180.327771][   T32] audit: type=1800 audit(1789137391.292:15): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.942" name="file1" dev="loop2" ino=20 res=0 errno=0
[  180.446172][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.948'.
[  180.632346][ T8548] program syz.1.951 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  181.135143][ T8563] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  181.939129][ T8580] jffs2: notice: (8580) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  182.230693][ T8590] program syz.0.971 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  182.754746][ T5801] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  182.906378][ T5801] usb 2-1: Using ep0 maxpacket: 8
[  182.908612][ T5801] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  182.912317][ T5801] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  182.912332][ T5801] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  182.912342][ T5801] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  182.912352][ T5801] usb 2-1: config 250 has no interface number 0
[  182.912373][ T5801] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  182.912386][ T5801] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  182.912398][ T5801] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 11
[  182.912409][ T5801] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  182.912421][ T5801] usb 2-1: config 250 interface 228 has no altsetting 0
[  182.920734][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  182.920747][ T5801] usb 2-1: Product: syz
[  182.920754][ T5801] usb 2-1: SerialNumber: syz
[  183.061086][ T5801] hub 2-1:250.228: bad descriptor, ignoring hub
[  183.061102][ T5801] hub 2-1:250.228: probe with driver hub failed with error -5
[  183.173872][    T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  183.266259][ T5801] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  183.304735][    T9] usb 4-1: device descriptor read/64, error -71
[  183.435958][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.543763][    T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  183.589577][ T8621] loop4: detected capacity change from 0 to 512
[  183.674063][    T9] usb 4-1: device descriptor read/64, error -71
[  183.756316][    C0] usblp0: nonzero read bulk status received: -71
[  183.784041][    T9] usb usb4-port1: attempt power cycle
[  183.852378][ T5801] usb 2-1: USB disconnect, device number 6
[  183.882418][ T5801] usblp0: removed
[  184.123786][    T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  184.145388][    T9] usb 4-1: device descriptor read/8, error -71
[  184.149401][ T8634] loop0: detected capacity change from 0 to 512
[  184.184024][   T32] audit: type=1800 audit(1789137395.152:16): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.992" name="file0" dev="loop0" ino=1048660 res=0 errno=0
[  184.306204][ T8634] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 49)
[  184.306220][ T8634] FAT-fs (loop0): Filesystem has been set read-only
[  184.385286][    T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  184.404298][    T9] usb 4-1: device descriptor read/8, error -71
[  184.511182][ T8639] netlink: 68 bytes leftover after parsing attributes in process `syz.0.994'.
[  184.511197][ T8639] netlink: 48 bytes leftover after parsing attributes in process `syz.0.994'.
[  184.532876][    T9] usb usb4-port1: unable to enumerate USB device
[  185.214804][ T8662] loop0: detected capacity change from 0 to 256
[  185.238609][ T8662] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  185.477986][ T8667] loop0: detected capacity change from 0 to 2048
[  185.507220][ T8667] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  185.507456][ T8667] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  185.507466][ T8667] UDF-fs: Scanning with blocksize 512 failed
[  185.559385][ T8667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.968444][ T8676] loop1: detected capacity change from 0 to 512
[  186.055137][ T8676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.096295][ T8676] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  186.127022][ T8676] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  186.343429][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.466805][ T8691] loop0: detected capacity change from 0 to 2048
[  186.751093][ T8700] loop1: detected capacity change from 0 to 1024
[  187.103208][ T8668] loop2: detected capacity change from 0 to 32768
[  187.142678][ T8709] loop3: detected capacity change from 0 to 512
[  187.157287][ T8709] EXT4-fs: Ignoring removed nobh option
[  187.162245][ T8668] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1006 (8668)
[  187.192557][ T8668] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  187.192577][ T8668] BTRFS info (device loop2): using crc32c checksum algorithm
[  187.193324][ T8709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.193386][ T8709] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.383044][ T8668] BTRFS info (device loop2): enabling ssd optimizations
[  187.383062][ T8668] BTRFS info (device loop2): turning on async discard
[  187.383070][ T8668] BTRFS info (device loop2): enabling free space tree
[  187.436384][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.742989][ T5614] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  187.973002][   T32] audit: type=1326 audit(1789137398.932:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8732 comm="syz.3.1026" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ed199e159 code=0x0
[  188.436724][ T8748] loop0: detected capacity change from 0 to 2048
[  188.465654][ T8748] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  188.465669][ T8748] UDF-fs: Scanning with blocksize 512 failed
[  188.491279][ T8748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.635891][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'.
[  188.815693][ T8758] loop4: detected capacity change from 0 to 256
[  188.866688][   T32] audit: type=1800 audit(1789137399.832:18): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1038" name="file1" dev="loop4" ino=1048661 res=0 errno=0
[  189.041937][ T8764] veth0: entered promiscuous mode
[  189.042111][ T8763] veth0: left promiscuous mode
[  189.252634][ T8774] loop1: detected capacity change from 0 to 1024
[  189.360818][ T8774] hfsplus: found bad thread record in catalog
[  189.374229][ T8774] hfsplus: found bad thread record in catalog
[  189.456855][   T61] hfsplus: found bad thread record in catalog
[  189.624731][ T8783] exfat: Deprecated parameter 'namecase'
[  189.675855][ T8783] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  190.063448][ T8797] input: syz1 as /devices/virtual/input/input11
[  190.286028][ T8775] set_capacity_and_notify: 1 callbacks suppressed
[  190.286042][ T8775] loop3: detected capacity change from 0 to 40427
[  190.307499][ T8775] F2FS-fs (loop3): invalid crc value
[  190.553188][ T8775] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  190.671686][ T8775] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  190.791878][ T5619] syz-executor: attempt to access beyond end of device
[  190.791878][ T5619] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  190.833357][ T5619] CPU: 0 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  190.833374][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  190.833392][ T5619] Call Trace:
[  190.833397][ T5619]  <TASK>
[  190.833402][ T5619]  dump_stack_lvl+0xe8/0x150
[  190.833423][ T5619]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  190.833438][ T5619]  f2fs_write_end_bio+0x1211/0x16e0
[  190.833454][ T5619]  ? blkg_put+0x22/0x240
[  190.833473][ T5619]  __submit_merged_bio+0x258/0x6a0
[  190.833483][ T5619]  ? rcu_is_watching+0x16/0xb0
[  190.833499][ T5619]  __submit_merged_write_cond+0x3c9/0x4e0
[  190.833515][ T5619]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  190.833538][ T5619]  f2fs_write_data_pages+0x2a1d/0x36f0
[  190.833551][ T5619]  ? __lock_acquire+0x747/0x2de0
[  190.833580][ T5619]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  190.833616][ T5619]  ? __bfs+0x153/0x290
[  190.833626][ T5619]  ? __pfx_hlock_conflict+0x10/0x10
[  190.833650][ T5619]  ? lockdep_unlock+0x5c/0xd0
[  190.833659][ T5619]  ? __lock_acquire+0x1511/0x2de0
[  190.833683][ T5619]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  190.833696][ T5619]  do_writepages+0x338/0x560
[  190.833714][ T5619]  ? do_raw_spin_unlock+0xf5/0x200
[  190.833730][ T5619]  filemap_fdatawrite+0x1e9/0x2f0
[  190.833746][ T5619]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  190.833781][ T5619]  ? do_raw_spin_unlock+0xf5/0x200
[  190.833797][ T5619]  f2fs_sync_dirty_inodes+0x30e/0x830
[  190.833818][ T5619]  f2fs_write_checkpoint+0xa38/0x2710
[  190.833830][ T5619]  ? __lock_acquire+0x747/0x2de0
[  190.833857][ T5619]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  190.833898][ T5619]  kill_f2fs_super+0x2dd/0x700
[  190.833915][ T5619]  ? __pfx_kill_f2fs_super+0x10/0x10
[  190.833934][ T5619]  ? call_rcu+0x64d/0x8b0
[  190.833947][ T5619]  ? lockdep_hardirqs_on+0x7b/0x110
[  190.833965][ T5619]  deactivate_locked_super+0xbc/0x110
[  190.833977][ T5619]  cleanup_mnt+0x3d3/0x460
[  190.833993][ T5619]  task_work_run+0x1d9/0x260
[  190.834006][ T5619]  ? __pfx_task_work_run+0x10/0x10
[  190.834023][ T5619]  exit_to_user_mode_loop+0x204/0x770
[  190.834035][ T5619]  ? rcu_is_watching+0x16/0xb0
[  190.834050][ T5619]  do_syscall_64+0x328/0x520
[  190.834060][ T5619]  ? trace_irq_disable+0x3b/0x140
[  190.834071][ T5619]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.834081][ T5619]  ? clear_bhb_loop+0x70/0xc0
[  190.834093][ T5619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.834103][ T5619] RIP: 0033:0x7f5ed199f397
[  190.834120][ T5619] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  190.834128][ T5619] RSP: 002b:00007ffc0eca03a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  190.834140][ T5619] RAX: 0000000000000000 RBX: 00007f5ed1a3448b RCX: 00007f5ed199f397
[  190.834147][ T5619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0eca0460
[  190.834153][ T5619] RBP: 00007ffc0eca0460 R08: 00007ffc0eca1460 R09: 00000000ffffffff
[  190.834159][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0eca14f0
[  190.834166][ T5619] R13: 00007f5ed1a3448b R14: 000000000002e901 R15: 00007ffc0eca1530
[  190.834182][ T5619]  </TASK>
[  190.950558][ T5619] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  191.220557][ T8793] loop1: detected capacity change from 0 to 32768
[  191.230845][ T8793] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1055 (8793)
[  191.287424][ T8793] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  191.287445][ T8793] BTRFS info (device loop1): using sha256 checksum algorithm
[  191.370321][ T8817] loop0: detected capacity change from 0 to 256
[  191.504019][ T8793] BTRFS info (device loop1): rebuilding free space tree
[  191.558361][ T8796] loop2: detected capacity change from 0 to 40427
[  191.590160][ T8796] F2FS-fs (loop2): invalid crc value
[  191.736900][ T8831] loop0: detected capacity change from 0 to 256
[  191.783291][ T8831] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  192.015371][ T8796] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  192.020481][ T8793] BTRFS info (device loop1): disabling free space tree
[  192.020536][ T8793] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  192.020548][ T8793] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  192.108123][ T8796] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  192.170283][ T8793] BTRFS info (device loop1): setting nodatasum
[  192.170300][ T8793] BTRFS info (device loop1): setting nodatacow
[  192.170308][ T8793] BTRFS info (device loop1): enabling ssd optimizations
[  192.170315][ T8793] BTRFS info (device loop1): using spread ssd allocation scheme
[  192.170323][ T8793] BTRFS info (device loop1): turning off barriers
[  192.170331][ T8793] BTRFS info (device loop1): turning on flush-on-commit
[  192.170338][ T8793] BTRFS info (device loop1): turning on sync discard
[  192.170346][ T8793] BTRFS info (device loop1): force clearing of disk cache
[  192.294302][ T8796] syz.2.1056: attempt to access beyond end of device
[  192.294302][ T8796] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  192.300094][ T8796] CPU: 0 UID: 0 PID: 8796 Comm: syz.2.1056 Not tainted syzkaller #0 PREEMPT(full) 
[  192.300110][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  192.300117][ T8796] Call Trace:
[  192.300122][ T8796]  <TASK>
[  192.300127][ T8796]  dump_stack_lvl+0xe8/0x150
[  192.300147][ T8796]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  192.300162][ T8796]  f2fs_write_end_bio+0x1211/0x16e0
[  192.300177][ T8796]  ? blkg_put+0x22/0x240
[  192.300196][ T8796]  __submit_merged_bio+0x258/0x6a0
[  192.300207][ T8796]  ? rcu_is_watching+0x16/0xb0
[  192.300222][ T8796]  __submit_merged_write_cond+0x3c9/0x4e0
[  192.300237][ T8796]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  192.300259][ T8796]  f2fs_write_data_pages+0x2a1d/0x36f0
[  192.300289][ T8796]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.300300][ T8796]  ? __lock_acquire+0x747/0x2de0
[  192.300317][ T8796]  ? __dequeue_entity+0xb3/0x1200
[  192.300350][ T8796]  ? __lock_acquire+0x747/0x2de0
[  192.300368][ T8796]  ? __lock_acquire+0x747/0x2de0
[  192.300383][ T8796]  ? do_raw_spin_lock+0x12b/0x2f0
[  192.300403][ T8796]  ? do_raw_spin_unlock+0xf5/0x200
[  192.300416][ T8796]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.300429][ T8796]  do_writepages+0x338/0x560
[  192.300446][ T8796]  ? do_raw_spin_unlock+0xf5/0x200
[  192.300461][ T8796]  filemap_write_and_wait_range+0x335/0x3f0
[  192.300475][ T8796]  ? __lock_acquire+0x747/0x2de0
[  192.300485][ T8796]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[  192.300516][ T8796]  ? futex_unqueue+0x22/0x240
[  192.300531][ T8796]  ? __lock_acquire+0x747/0x2de0
[  192.300541][ T8796]  ? fiemap_prep+0x1c7/0x250
[  192.300556][ T8796]  f2fs_fiemap+0x19a/0x1880
[  192.300574][ T8796]  ? __pfx_f2fs_fiemap+0x10/0x10
[  192.300584][ T8796]  ? lock_acquire+0x115/0x350
[  192.300602][ T8796]  ? __might_fault+0xaf/0x130
[  192.300616][ T8796]  do_vfs_ioctl+0x1263/0x1530
[  192.300630][ T8796]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  192.300649][ T8796]  ? hook_file_ioctl+0x1f2/0x600
[  192.300674][ T8796]  ? __fget_files+0x2a/0x420
[  192.300686][ T8796]  ? __fget_files+0x2a/0x420
[  192.300695][ T8796]  ? __fget_files+0x3a2/0x420
[  192.300704][ T8796]  ? __fget_files+0x2a/0x420
[  192.300716][ T8796]  ? bpf_lsm_file_ioctl+0x9/0x20
[  192.300727][ T8796]  __se_sys_ioctl+0x82/0x170
[  192.300741][ T8796]  do_syscall_64+0x166/0x520
[  192.300751][ T8796]  ? trace_irq_disable+0x3b/0x140
[  192.300762][ T8796]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.300772][ T8796]  ? clear_bhb_loop+0x70/0xc0
[  192.300785][ T8796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.300795][ T8796] RIP: 0033:0x7f8e0299e159
[  192.300805][ T8796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.300814][ T8796] RSP: 002b:00007f8e037bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  192.300825][ T8796] RAX: ffffffffffffffda RBX: 00007f8e02c25fa0 RCX: 00007f8e0299e159
[  192.300832][ T8796] RDX: 0000200000000100 RSI: 00000000c020660b RDI: 0000000000000005
[  192.300839][ T8796] RBP: 00007f8e02a3503b R08: 0000000000000000 R09: 0000000000000000
[  192.300844][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.300850][ T8796] R13: 00007f8e02c26038 R14: 00007f8e02c25fa0 R15: 00007ffc02f6eb38
[  192.300866][ T8796]  </TASK>
[  192.361818][ T8796] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  192.696400][ T8809] loop4: detected capacity change from 0 to 32768
[  192.713163][ T8809] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1061 (8809)
[  192.728987][ T5615] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  192.746222][ T5720] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  192.772686][ T8809] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  192.772706][ T8809] BTRFS info (device loop4): using xxhash64 checksum algorithm
[  192.901081][ T8809] BTRFS info (device loop4): enabling ssd optimizations
[  192.901098][ T8809] BTRFS info (device loop4): turning on async discard
[  192.901106][ T8809] BTRFS info (device loop4): enabling free space tree
[  192.921452][ T5720] usb 1-1: Using ep0 maxpacket: 16
[  192.930128][ T5720] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  192.953543][ T5720] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  192.953558][ T5720] usb 1-1: config 0 has no interface number 0
[  192.953579][ T5720] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.953593][ T5720] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.953613][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.010405][ T5720] usb 1-1: config 0 descriptor??
[  193.483108][ T5720] hid (null): unknown global tag 0xc
[  193.483124][ T5720] hid (null): unknown global tag 0xe
[  193.483145][ T5720] hid (null): report_id 3323596431 is invalid
[  193.483153][ T5720] hid (null): unknown global tag 0xe
[  193.483175][ T5720] hid (null): unknown global tag 0xe
[  193.522176][ T5720] hid (null): unknown global tag 0xe
[  193.522228][ T5720] hid (null): unknown global tag 0xd
[  193.522283][ T5720] hid (null): unknown global tag 0x63
[  193.522487][ T5720] hid (null): unknown global tag 0xc
[  193.523140][ T5720] hid (null): unknown global tag 0xe4
[  193.523151][ T5720] hid (null): usage index exceeded
[  193.697661][    T9] usb 1-1: USB disconnect, device number 8
[  193.764123][ T5613] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  194.037322][ T8863] mtrr: base(0x2df12710000) is not aligned on a size(0x71309926000) boundary
[  194.213563][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  194.213597][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  194.546244][ T8880] jffs2: notice: (8880) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  195.136956][ T8896] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1082'.
[  195.162978][ T8895] loop1: detected capacity change from 0 to 2048
[  195.180791][ T8892] loop2: detected capacity change from 0 to 4096
[  195.222485][ T8895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.282764][ T8900] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.282869][ T8895] EXT4-fs (loop1): shut down requested (1)
[  195.361922][ T8892] NILFS (loop2): error -22 preparing GC: cannot mark copying blocks dirty
[  195.374124][ T8902] netlink: 'syz.4.1084': attribute type 5 has an invalid length.
[  195.380552][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.867444][ T8916] overlayfs: upper fs does not support tmpfile.
[  195.959716][ T8920] loop4: detected capacity change from 0 to 2048
[  195.989534][ T8920] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  196.008960][ T8920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  196.273856][ T8872] Bluetooth: hci0: command 0x0406 tx timeout
[  196.273938][ T8872] Bluetooth: hci1: command 0x0406 tx timeout
[  196.273964][ T8872] Bluetooth: hci2: command 0x0406 tx timeout
[  196.273987][ T8872] Bluetooth: hci4: command 0x0405 tx timeout
[  196.826823][ T8946] loop4: detected capacity change from 0 to 1024
[  196.869201][ T8946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  196.869260][ T8946] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.008448][ T8951] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1103: corrupted xattr block 84: invalid header
[  197.048103][ T8946] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1103: corrupted xattr block 84: invalid header
[  197.076481][ T8953] loop1: detected capacity change from 0 to 64
[  197.216242][   T51] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 6)
[  197.242301][   T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  197.242319][   T51] EXT4-fs (loop4): This should not happen!! Data will be lost
[  197.242319][   T51] 
[  197.271596][   T51] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set
[  197.307291][ T8953] syz.1.1105: attempt to access beyond end of device
[  197.307291][ T8953] loop1: rw=2049, sector=153, nr_sectors = 8 limit=64
[  197.310003][   T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 27 with error 28
[  197.310021][   T51] EXT4-fs (loop4): This should not happen!! Data will be lost
[  197.310021][   T51] 
[  197.310029][   T51] EXT4-fs (loop4): Total free blocks count 0
[  197.310036][   T51] EXT4-fs (loop4): Free/Dirty block details
[  197.310042][   T51] EXT4-fs (loop4): free_blocks=0
[  197.310078][   T51] EXT4-fs (loop4): dirty_blocks=32
[  197.310085][   T51] EXT4-fs (loop4): Block reservation details
[  197.310707][ T5613] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost
[  197.356242][ T8953] syz.1.1105: attempt to access beyond end of device
[  197.356242][ T8953] loop1: rw=8390657, sector=161, nr_sectors = 1 limit=64
[  197.356414][ T8953] Buffer I/O error on dev loop1, logical block 161, lost async page write
[  197.356456][ T8953] syz.1.1105: attempt to access beyond end of device
[  197.356456][ T8953] loop1: rw=8390657, sector=162, nr_sectors = 1 limit=64
[  197.356469][ T8953] Buffer I/O error on dev loop1, logical block 162, lost async page write
[  197.356480][ T8953] syz.1.1105: attempt to access beyond end of device
[  197.356480][ T8953] loop1: rw=8390657, sector=163, nr_sectors = 1 limit=64
[  197.356491][ T8953] Buffer I/O error on dev loop1, logical block 163, lost async page write
[  197.356501][ T8953] syz.1.1105: attempt to access beyond end of device
[  197.356501][ T8953] loop1: rw=8390657, sector=167, nr_sectors = 1 limit=64
[  197.356512][ T8953] Buffer I/O error on dev loop1, logical block 167, lost async page write
[  197.696008][ T8934] loop2: detected capacity change from 0 to 32768
[  197.711913][ T8959] loop0: detected capacity change from 0 to 64
[  197.745203][ T8934] XFS (loop2): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[  197.902695][ T5614] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  198.130940][ T8975] loop1: detected capacity change from 0 to 256
[  198.131343][ T8975] exfat: Deprecated parameter 'utf8'
[  198.131398][ T8975] exfat: Deprecated parameter 'namecase'
[  198.131426][ T8975] exfat: Deprecated parameter 'namecase'
[  198.200902][ T8975] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  198.576453][ T8983] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1114'.
[  198.632154][ T8983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.695817][ T8983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.716234][ T8983] bond0 (unregistering): Released all slaves
[  198.743606][ T8991] loop3: detected capacity change from 0 to 512
[  198.788038][ T8991] EXT4-fs error (device loop3): ext4_get_journal_inode:5927: comm syz.3.1117: inode #2147418112: comm syz.3.1117: iget: illegal inode #
[  198.788058][ T8991] loop3: lost filesystem error report for type 5 error -117
[  198.805688][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  198.805703][    C0] EXT4-fs (loop3): initial error at time 1789137409: ext4_get_journal_inode:5927
[  198.805715][    C0] EXT4-fs (loop3): last error at time 1789137409: ext4_get_journal_inode:5927
[  198.843797][ T8991] EXT4-fs (loop3): no journal found
[  198.843810][ T8991] EXT4-fs (loop3): can't get journal size
[  198.858742][ T8991] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  198.877418][ T8991] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  198.878675][ T8991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.025420][ T8991] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.1117: Invalid inode bitmap blk 4 in block_group 0
[  199.051615][ T8991] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  199.140838][ T8991] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.1117: Invalid inode bitmap blk 4 in block_group 0
[  199.188216][ T9002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1122'.
[  199.188230][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'.
[  199.214633][ T9002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1122'.
[  199.214646][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'.
[  199.214997][ T9002] Zero length message leads to an empty skb
[  199.337972][ T8991] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem
[  199.442670][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.568687][ T9014] loop0: detected capacity change from 0 to 512
[  199.591238][ T9014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  199.591310][ T9014] System zones: 1-12
[  199.592396][ T9014] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.1126: missing EA_INODE flag
[  199.592411][ T9014] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  199.593710][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  199.593725][    C0] EXT4-fs (loop0): initial error at time 1789137410: ext4_xattr_inode_iget:437: inode 12
[  199.593741][    C0] EXT4-fs (loop0): last error at time 1789137410: ext4_xattr_inode_iget:437: inode 12
[  199.662896][ T9014] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1126: error while reading EA inode 12 err=-117
[  199.662915][ T9014] loop0: lost filesystem error report for type 5 error -117
[  199.679477][ T9014] EXT4-fs (loop0): 1 orphan inode deleted
[  199.680506][ T9014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.794320][ T9014] fscrypt (loop0, inode 15): Direct key flag not allowed with different contents and filenames modes
[  199.878140][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.911043][ T9021] loop1: detected capacity change from 0 to 2048
[  199.941391][ T9023] netlink: 'syz.4.1131': attribute type 10 has an invalid length.
[  199.967117][ T9023] team0: Device vxcan0 is of different type
[  200.019295][ T9021] Alternate GPT is invalid, using primary GPT.
[  200.023423][   T32] audit: type=1326 audit(1789137410.982:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9025 comm="syz.3.1132" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ed199e159 code=0x0
[  200.058162][ T9021]  loop1: p2 p3 p7
[  200.398683][ T5624] udevd[5624]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  200.401337][ T5630] udevd[5630]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  200.432383][ T5842] udevd[5842]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  200.579413][ T9041] ip_tables: iptables: counters copy to user failed while replacing table
[  200.754472][ T9043] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1138'.
[  200.996626][ T9050] serio: Serial port ttyS3
[  201.127394][ T9057] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  201.127394][ T9057] The task syz.3.1142 (9057) triggered the difference, watch for misbehavior.
[  201.233572][ T9059] loop1: detected capacity change from 0 to 256
[  201.280977][ T9059] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d)
[  201.303402][ T9039] loop0: detected capacity change from 0 to 32768
[  201.345590][ T9039] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  201.402913][ T9039] XFS (loop0): Ending clean mount
[  201.585670][ T5631] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  201.643228][ T9073] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  202.216572][ T9087] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1153'.
[  202.811787][ T9110] loop1: detected capacity change from 0 to 512
[  202.826172][ T9110] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.826209][ T9110] EXT4-fs: Ignoring removed mblk_io_submit option
[  202.829929][   T32] audit: type=1400 audit(1789137413.792:20): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=9106 comm="syz.3.1162" name="foo" offset=35
[  202.903963][ T9112] loop0: detected capacity change from 0 to 512
[  202.924269][ T9110] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  202.924286][ T9110] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  202.951876][ T9112] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  202.954855][ T9112] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #16: comm syz.0.1165: corrupted inode contents
[  202.954872][ T9112] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  202.969968][    C0] EXT4-fs (loop0): error count since last fsck: 2
[  202.969981][    C0] EXT4-fs (loop0): initial error at time 1789137413: ext4_mb_generate_buddy:1317
[  202.969995][    C0] EXT4-fs (loop0): last error at time 1789137413: ext4_do_update_inode:5801: inode 16
[  202.970424][ T9112] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #16: comm syz.0.1165: mark_inode_dirty error
[  202.970439][ T9112] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  202.970768][ T9112] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #16: comm syz.0.1165: corrupted inode contents
[  202.970782][ T9112] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  202.970994][ T9112] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1165: mark_inode_dirty error
[  202.971008][ T9112] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  202.971216][ T9112] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #16: comm syz.0.1165: corrupted inode contents
[  202.971230][ T9112] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  202.971448][ T9112] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1165: mark_inode_dirty error
[  202.971462][ T9112] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  202.973246][ T9112] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #16: comm syz.0.1165: corrupted inode contents
[  202.973262][ T9112] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  203.004663][ T9112] EXT4-fs error (device loop0) in ext4_orphan_del:304: Corrupt filesystem
[  203.004677][ T9112] loop0: lost filesystem error report for type 5 error -117
[  203.004938][ T9112] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #16: comm syz.0.1165: corrupted inode contents
[  203.004954][ T9112] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  203.006883][ T9112] EXT4-fs error (device loop0): ext4_truncate:4721: inode #16: comm syz.0.1165: mark_inode_dirty error
[  203.006898][ T9112] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  203.026247][ T9112] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem
[  203.026260][ T9112] loop0: lost filesystem error report for type 5 error -117
[  203.039445][ T9112] EXT4-fs (loop0): 1 truncate cleaned up
[  203.040424][ T9112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.040487][ T9112] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.267232][ T9110] EXT4-fs (loop1): 1 truncate cleaned up
[  203.268227][ T9110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.367930][ T9110] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #2: block 4: comm syz.1.1163: lblock 0 mapped to illegal pblock 4 (length 1)
[  203.369354][ T9110] EXT4-fs (loop1): Remounting filesystem read-only
[  203.488967][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.531835][   T61] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  203.531893][   T61] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 1
[  203.647241][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.101137][ T9138] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  204.101153][ T9138] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  204.225172][ T9142] netlink: 'syz.2.1178': attribute type 3 has an invalid length.
[  204.225189][ T9142] netlink: 'syz.2.1178': attribute type 3 has an invalid length.
[  204.225532][ T9142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1178'.
[  204.422428][ T9151] loop2: detected capacity change from 0 to 512
[  204.475658][ T9151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.475753][ T9151] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.574930][ T9158] loop0: detected capacity change from 0 to 512
[  204.594948][ T9158] EXT4-fs (loop0): Test dummy encryption mode enabled
[  204.594971][ T9158] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  204.600754][ T9158] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.1184: bad orphan inode 131072
[  204.600772][ T9158] loop0: lost filesystem error report for type 5 error -117
[  204.602909][ T9158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.685518][ T9158] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  204.764323][ T9151] EXT4-fs error (device loop2): ext4_get_first_dir_block:3539: inode #12: comm syz.2.1182: Attempting to read directory block (0) that is past i_size (3)
[  204.828817][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.901099][ T9151] EXT4-fs (loop2): Remounting filesystem read-only
[  204.980734][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.200385][ T9170] Bluetooth: MGMT ver 1.23
[  205.212841][ T9171] jffs2: notice: (9171) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  205.516872][ T9155] loop3: detected capacity change from 0 to 32768
[  205.592070][ T9155] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  205.647817][ T9155] (syz.3.1183,9155,0):ocfs2_reflink_ioctl:4473 ERROR: status = -2
[  205.694595][ T9184] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1195'.
[  205.813578][ T9186] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  205.856954][ T5619] ocfs2: Unmounting device (7,3) on (node local)
[  206.698580][ T9218] loop4: detected capacity change from 0 to 256
[  206.737247][ T9218] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  206.841082][ T9225] jffs2: notice: (9225) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  207.072440][ T9232] netlink: 'syz.0.1216': attribute type 1 has an invalid length.
[  207.683616][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'.
[  207.702101][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'.
[  208.031105][ T9266] loop2: detected capacity change from 0 to 2048
[  208.051572][ T9266] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  208.072987][ T9266] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.319862][ T9277] loop3: detected capacity change from 0 to 1024
[  208.686888][ T9289] netlink: 'syz.3.1244': attribute type 3 has an invalid length.
[  209.162071][ T9301] loop3: detected capacity change from 0 to 512
[  209.178687][ T9301] EXT4-fs: Ignoring removed oldalloc option
[  209.209903][ T9301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.397929][ T9287] loop2: detected capacity change from 0 to 32768
[  209.492044][ T9287] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  209.503310][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  209.564533][ T9287] XFS (loop2): Ending clean mount
[  209.663858][   T10] usb 4-1: Using ep0 maxpacket: 16
[  209.665280][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  209.669009][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.669022][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  209.719783][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.719799][   T10] usb 4-1: Product: syz
[  209.719807][   T10] usb 4-1: Manufacturer: syz
[  209.719814][   T10] usb 4-1: SerialNumber: syz
[  209.753441][ T9315] loop0: detected capacity change from 0 to 256
[  209.762869][ T9315] exfat: Deprecated parameter 'utf8'
[  209.782097][ T5614] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  209.801096][   T10] usb 4-1: 0:2 : does not exist
[  209.853052][ T9315] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  210.001121][   T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  210.103485][ T9296] loop1: detected capacity change from 0 to 32768
[  210.220897][ T9296] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  210.260333][   T10] usb 4-1: USB disconnect, device number 16
[  210.315708][ T9296] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  210.348179][ T9296] XFS (loop1): Starting recovery (logdev: internal)
[  210.417983][ T9296] XFS (loop1): Ending recovery (logdev: internal)
[  210.515146][ T9296] XFS (loop1): Metadata corruption detected at xfs_btree_lookup_get_block+0x2f6/0x4f0, xfs_bnobt block 0x8
[  210.515174][ T9296] XFS (loop1): Unmount and run xfs_repair
[  210.579510][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  210.637151][ T5615] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  210.637535][ T5615] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  210.705746][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.747503][ T9334] loop0: detected capacity change from 0 to 1024
[  210.747956][ T9334] EXT4-fs: Ignoring removed bh option
[  210.796239][ T9334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.862254][ T9334] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  211.039424][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.250181][ T9350] loop1: detected capacity change from 0 to 1024
[  211.251302][ T9352] input: syz1 as /devices/virtual/input/input12
[  211.399325][ T9355] loop2: detected capacity change from 0 to 1024
[  211.464626][   T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  211.572723][ T9358] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  211.632049][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  211.632072][   T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  211.642905][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  211.642934][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  211.642947][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  211.642957][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[  211.642978][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.728565][   T10] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected
[  211.746743][   T10] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2
[  211.834013][   T10] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  211.837497][   T10] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88
[  211.837546][   T10] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6
[  211.878709][   T10] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  212.023825][ T9364] device-mapper: ioctl: name not supplied when creating device
[  212.236918][ T9368] loop9: detected capacity change from 0 to 7
[  212.242701][ T9368] Dev loop9: unable to read RDB block 7
[  212.242727][ T9368]  loop9: unable to read partition table
[  212.242873][ T9368] loop9: partition table beyond EOD, truncated
[  212.273095][ T9368] loop_reread_partitions: partition scan of loop9 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  212.410215][ T9374] loop1: detected capacity change from 0 to 1024
[  212.458026][ T9374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.525807][ T9374] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  212.617336][ T9374] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  212.617358][ T9374] EXT4-fs (loop1): This should not happen!! Data will be lost
[  212.617358][ T9374] 
[  212.617365][ T9374] EXT4-fs (loop1): Total free blocks count 0
[  212.617372][ T9374] EXT4-fs (loop1): Free/Dirty block details
[  212.617436][ T9374] EXT4-fs (loop1): free_blocks=68451041280
[  212.617458][ T9374] EXT4-fs (loop1): dirty_blocks=80
[  212.617465][ T9374] EXT4-fs (loop1): Block reservation details
[  212.617470][ T9374] EXT4-fs (loop1): i_reserved_data_blocks=5
[  212.733393][   T10] usb 1-1: USB disconnect, device number 9
[  212.762277][   T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  212.779576][   T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  212.780032][   T10] keyspan 1-1:1.0: device disconnected
[  212.832541][   T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  212.868788][ T9387] jffs2: notice: (9387) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  213.264120][ T9400] loop4: detected capacity change from 0 to 4096
[  213.339347][ T9400] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  213.398999][ T9400] ntfs3(loop4): Failed to load $Extend (-22).
[  213.399015][ T9400] ntfs3(loop4): Failed to initialize $Extend.
[  213.525488][ T9408] loop2: detected capacity change from 0 to 256
[  214.123993][ T9422] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  214.180915][ T9422] batman_adv: batadv0: Adding interface: macsec1
[  214.180927][ T9422] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  214.180943][ T9422] batman_adv: batadv0: Interface activated: macsec1
[  214.242859][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'.
[  214.456308][ T9434] loop2: detected capacity change from 0 to 512
[  214.476326][ T9434] EXT4-fs (loop2): Test dummy encryption mode enabled
[  214.476339][ T9434] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  214.483413][ T9434] EXT4-fs (loop2): 1 truncate cleaned up
[  214.519538][ T9434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.657081][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.790824][ T9412] loop1: detected capacity change from 0 to 40427
[  214.818856][ T9412] F2FS-fs (loop1): invalid crc value
[  214.832511][ T9443] loop2: detected capacity change from 0 to 512
[  215.094240][ T9412] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  215.145723][ T9412] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0
[  215.145742][ T9412] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  215.145756][ T9412] F2FS-fs (loop1): Start checkpoint disabled!
[  215.256929][ T9412] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0
[  215.257667][ T9412] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  215.398943][ T1157] kworker/u8:9: attempt to access beyond end of device
[  215.398943][ T1157] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  215.398991][ T1157] CPU: 0 UID: 0 PID: 1157 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) 
[  215.399003][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  215.399009][ T1157] Workqueue: writeback wb_workfn (flush-7:1)
[  215.399031][ T1157] Call Trace:
[  215.399036][ T1157]  <TASK>
[  215.399040][ T1157]  dump_stack_lvl+0xe8/0x150
[  215.399057][ T1157]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  215.399072][ T1157]  f2fs_write_end_bio+0x1211/0x16e0
[  215.399086][ T1157]  ? blkg_put+0x22/0x240
[  215.399105][ T1157]  __submit_merged_bio+0x258/0x6a0
[  215.399116][ T1157]  ? rcu_is_watching+0x16/0xb0
[  215.399132][ T1157]  __submit_merged_write_cond+0x3c9/0x4e0
[  215.399147][ T1157]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  215.399171][ T1157]  f2fs_write_data_pages+0x2a1d/0x36f0
[  215.399201][ T1157]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  215.399229][ T1157]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  215.399260][ T1157]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  215.399280][ T1157]  ? __lock_acquire+0x747/0x2de0
[  215.399303][ T1157]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  215.399316][ T1157]  do_writepages+0x338/0x560
[  215.399332][ T1157]  ? reacquire_held_locks+0x117/0x1a0
[  215.399344][ T1157]  ? writeback_sb_inodes+0x450/0x1af0
[  215.399357][ T1157]  __writeback_single_inode+0x136/0x1220
[  215.399372][ T1157]  ? do_raw_spin_unlock+0xf5/0x200
[  215.399388][ T1157]  writeback_sb_inodes+0x9de/0x1af0
[  215.399397][ T1157]  ? __lock_acquire+0x747/0x2de0
[  215.399416][ T1157]  ? lock_acquire+0x115/0x350
[  215.399430][ T1157]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  215.399461][ T1157]  ? rcu_is_watching+0x16/0xb0
[  215.399474][ T1157]  ? queue_io+0x2d3/0x470
[  215.399485][ T1157]  wb_writeback+0x41c/0xad0
[  215.399496][ T1157]  ? queue_io+0x2d1/0x470
[  215.399509][ T1157]  ? __pfx_wb_writeback+0x10/0x10
[  215.399517][ T1157]  ? do_raw_spin_lock+0x12b/0x2f0
[  215.399539][ T1157]  wb_workfn+0x431/0x10f0
[  215.399562][ T1157]  ? __pfx_wb_workfn+0x10/0x10
[  215.399581][ T1157]  ? do_raw_spin_lock+0x12b/0x2f0
[  215.399600][ T1157]  ? lock_acquire+0x115/0x350
[  215.399615][ T1157]  ? rcu_is_watching+0x16/0xb0
[  215.399628][ T1157]  ? process_scheduled_works+0x97a/0x1630
[  215.399643][ T1157]  process_scheduled_works+0xc3d/0x1630
[  215.399672][ T1157]  ? __pfx_process_scheduled_works+0x10/0x10
[  215.399689][ T1157]  ? assign_work+0x3cf/0x5d0
[  215.399705][ T1157]  worker_thread+0xa47/0xfb0
[  215.399726][ T1157]  ? __kthread_parkme+0x71/0x1f0
[  215.399746][ T1157]  kthread+0x38b/0x480
[  215.399756][ T1157]  ? __pfx_worker_thread+0x10/0x10
[  215.399769][ T1157]  ? __pfx_kthread+0x10/0x10
[  215.399780][ T1157]  ret_from_fork+0x514/0xb70
[  215.399792][ T1157]  ? __pfx_ret_from_fork+0x10/0x10
[  215.399801][ T1157]  ? __switch_to+0xc89/0x1420
[  215.399816][ T1157]  ? __pfx_kthread+0x10/0x10
[  215.399827][ T1157]  ret_from_fork_asm+0x1a/0x30
[  215.399850][ T1157]  </TASK>
[  215.403257][ T1157] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  215.403306][ T1157] CPU: 0 UID: 0 PID: 1157 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) 
[  215.403318][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  215.403325][ T1157] Workqueue: writeback wb_workfn (flush-7:1)
[  215.403345][ T1157] Call Trace:
[  215.403349][ T1157]  <TASK>
[  215.403354][ T1157]  dump_stack_lvl+0xe8/0x150
[  215.403371][ T1157]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  215.403385][ T1157]  f2fs_write_end_bio+0x1211/0x16e0
[  215.403409][ T1157]  __submit_merged_bio+0x258/0x6a0
[  215.403420][ T1157]  ? rcu_is_watching+0x16/0xb0
[  215.403436][ T1157]  __submit_merged_write_cond+0x3c9/0x4e0
[  215.403452][ T1157]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  215.403475][ T1157]  f2fs_write_data_pages+0x2a1d/0x36f0
[  215.403505][ T1157]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  215.403524][ T1157]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  215.403555][ T1157]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  215.403578][ T1157]  ? __lock_acquire+0x747/0x2de0
[  215.403601][ T1157]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  215.403614][ T1157]  do_writepages+0x338/0x560
[  215.403630][ T1157]  ? reacquire_held_locks+0x117/0x1a0
[  215.403642][ T1157]  ? writeback_sb_inodes+0x450/0x1af0
[  215.403655][ T1157]  __writeback_single_inode+0x136/0x1220
[  215.403666][ T1157]  ? do_raw_spin_unlock+0xf5/0x200
[  215.403683][ T1157]  writeback_sb_inodes+0x9de/0x1af0
[  215.403692][ T1157]  ? __lock_acquire+0x747/0x2de0
[  215.403710][ T1157]  ? lock_acquire+0x115/0x350
[  215.403729][ T1157]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  215.403760][ T1157]  ? rcu_is_watching+0x16/0xb0
[  215.403773][ T1157]  ? queue_io+0x2d3/0x470
[  215.403784][ T1157]  wb_writeback+0x41c/0xad0
[  215.403795][ T1157]  ? queue_io+0x2d1/0x470
[  215.403808][ T1157]  ? __pfx_wb_writeback+0x10/0x10
[  215.403816][ T1157]  ? do_raw_spin_lock+0x12b/0x2f0
[  215.403838][ T1157]  wb_workfn+0x431/0x10f0
[  215.403861][ T1157]  ? __pfx_wb_workfn+0x10/0x10
[  215.403883][ T1157]  ? do_raw_spin_lock+0x12b/0x2f0
[  215.403902][ T1157]  ? lock_acquire+0x115/0x350
[  215.403917][ T1157]  ? rcu_is_watching+0x16/0xb0
[  215.403930][ T1157]  ? process_scheduled_works+0x97a/0x1630
[  215.403945][ T1157]  process_scheduled_works+0xc3d/0x1630
[  215.403974][ T1157]  ? __pfx_process_scheduled_works+0x10/0x10
[  215.403991][ T1157]  ? assign_work+0x3cf/0x5d0
[  215.404008][ T1157]  worker_thread+0xa47/0xfb0
[  215.404029][ T1157]  ? __kthread_parkme+0x71/0x1f0
[  215.404049][ T1157]  kthread+0x38b/0x480
[  215.404059][ T1157]  ? __pfx_worker_thread+0x10/0x10
[  215.404072][ T1157]  ? __pfx_kthread+0x10/0x10
[  215.404083][ T1157]  ret_from_fork+0x514/0xb70
[  215.404095][ T1157]  ? __pfx_ret_from_fork+0x10/0x10
[  215.404104][ T1157]  ? __switch_to+0xc89/0x1420
[  215.404119][ T1157]  ? __pfx_kthread+0x10/0x10
[  215.404130][ T1157]  ret_from_fork_asm+0x1a/0x30
[  215.404153][ T1157]  </TASK>
[  215.497280][ T1157] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  216.215299][ T9459] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1307'.
[  216.215329][ T9459] openvswitch: netlink: Message has 512 unknown bytes.
[  216.246947][ T9462] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  216.561535][ T9468] loop2: detected capacity change from 0 to 1024
[  216.824643][ T9479] macvlan0: entered promiscuous mode
[  216.824971][ T9479] netlink: 'syz.0.1316': attribute type 1 has an invalid length.
[  216.824981][ T9479] netlink: 'syz.0.1316': attribute type 2 has an invalid length.
[  217.590447][ T9515] WARNING! power/level is deprecated; use power/control instead
[  217.797578][   T10] hid_parser_main: 117 callbacks suppressed
[  217.797594][   T10] wiimote 0005:057E:0306.0007: unknown main item tag 0x0
[  217.891066][ T9526] loop2: detected capacity change from 0 to 1024
[  217.920687][ T9526] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  217.936636][ T5616] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  217.936912][   T10] wiimote 0005:057E:0306.0007: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  217.937931][   T10] wiimote 0005:057E:0306.0007: New device registered
[  218.116524][ T5616] usb 5-1: Using ep0 maxpacket: 8
[  218.118369][ T5616] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  218.146635][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.146651][ T5616] usb 5-1: Product: syz
[  218.146658][ T5616] usb 5-1: Manufacturer: syz
[  218.146665][ T5616] usb 5-1: SerialNumber: syz
[  218.387086][ T9511] wiimote 0005:057E:0306.0007: Device removed
[  218.392711][ T5616] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  218.392809][ T5616] usb 5-1: MIDIStreaming interface descriptor not found
[  218.430965][ T9535] loop2: detected capacity change from 0 to 2048
[  218.501721][ T9535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.569323][ T9535] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  218.569461][ T9535] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 2 with error 28
[  218.569474][ T9535] EXT4-fs (loop2): This should not happen!! Data will be lost
[  218.569474][ T9535] 
[  218.569481][ T9535] EXT4-fs (loop2): Total free blocks count 0
[  218.569487][ T9535] EXT4-fs (loop2): Free/Dirty block details
[  218.569494][ T9535] EXT4-fs (loop2): free_blocks=2415919104
[  218.569502][ T9535] EXT4-fs (loop2): dirty_blocks=32
[  218.569508][ T9535] EXT4-fs (loop2): Block reservation details
[  218.569514][ T9535] EXT4-fs (loop2): i_reserved_data_blocks=2
[  218.716721][ T9543] sctp: [Deprecated]: syz.0.1343 (pid 9543) Use of int in max_burst socket option deprecated.
[  218.716721][ T9543] Use struct sctp_assoc_value instead
[  218.764306][ T9514] loop1: detected capacity change from 0 to 32768
[  218.778446][ T9514] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1332 (9514)
[  218.809322][ T1107] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28
[  218.829584][ T9514] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  218.829602][ T9514] BTRFS info (device loop1): using blake2b checksum algorithm
[  218.868573][ T5616] usb 5-1: USB disconnect, device number 10
[  219.022183][ T5801] wiimote 0005:057E:0306.0007: detected device: Nintendo Wii Remote (Gen 1)
[  219.080987][ T9514] BTRFS info (device loop1): enabling ssd optimizations
[  219.081004][ T9514] BTRFS info (device loop1): turning on async discard
[  219.081012][ T9514] BTRFS info (device loop1): enabling free space tree
[  219.081021][ T9514] BTRFS info (device loop1): use zlib compression, level 3
[  219.119766][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'.
[  219.268158][ T5615] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  219.603206][ T5801] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input14
[  219.801375][ T5801] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input15
[  219.822666][ T5801] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input13
[  219.849388][ T7510] udevd[7510]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  220.024261][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  220.078404][ T9586] loop0: detected capacity change from 0 to 64
[  220.175618][    T9] usb 3-1: Using ep0 maxpacket: 8
[  220.183319][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  220.201412][    T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  220.201442][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  220.201453][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  220.201465][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  220.201475][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  220.201496][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.490466][    T9] usb 3-1: GET_CAPABILITIES returned 0
[  220.490495][    T9] usbtmc 3-1:16.0: can't read capabilities
[  220.699990][    T9] usb 3-1: USB disconnect, device number 5
[  221.644592][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  221.745827][ T9635] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1377'.
[  221.804452][    T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  221.807809][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.807838][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  221.807849][    T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  221.807860][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  221.807882][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.328158][ T9649] scsi_strcpy_devinfo: vendor string '�ÆMýŸê‡‹8KH,Pò}ƒ/(a»¯&¿WCa—8(½§ÉAu˜ÒÁÀâÈéÃ6cƒ1íÙƒXûºPweùÔñ$XPº×ÇK¼±î5Ôô°•ó'RªX7R.ø]O\¯¬kþekˆÝÙÓ©o‚pêëÒ‘0ð[ž{„¾q6�•?U³q9Ömߣ¼7`…`Ÿ0I3²¾ÅµÊ' is too long
[  222.455565][    T9] gud 3-1:1.0: Failed to add properties (error=-5)
[  222.455589][    T9] gud 3-1:1.0: probe with driver gud failed with error -5
[  222.580896][ T9662] sd 0:0:1:0: PR command failed: 1026
[  222.580925][ T9662] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  222.580947][ T9662] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  222.679046][ T5824] usb 3-1: USB disconnect, device number 6
[  222.744605][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  222.924649][    T9] usb 1-1: Using ep0 maxpacket: 32
[  222.925162][    T9] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  222.929110][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.935146][    T9] usb 1-1: config 0 descriptor??
[  222.973437][    T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  223.169512][ T9678] input: syz1 as /devices/virtual/input/input16
[  223.211059][ T9680] input: syz0 as /devices/virtual/input/input17
[  223.492610][ T9684] loop2: detected capacity change from 0 to 4096
[  223.510861][ T9684] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  223.582050][ T9684] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  223.796260][    T9] gspca_vc032x: reg_w err -71
[  223.796285][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796291][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796295][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796300][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796304][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796308][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796312][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796317][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796321][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796325][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796329][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796333][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796337][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796341][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796345][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796350][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796354][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796359][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  223.796362][    T9] gspca_vc032x: Unknown sensor...
[  223.796404][    T9] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  223.801368][    T9] usb 1-1: USB disconnect, device number 10
[  224.271032][   T44] Bluetooth: hci5: Frame reassembly failed (-84)
[  224.296168][   T12] Bluetooth: hci5: Frame reassembly failed (-84)
[  224.332925][ T5824] kernel write not supported for file /snd/seq (pid: 5824 comm: kworker/0:6)
[  224.445693][ T9708] loop1: detected capacity change from 0 to 64
[  225.112400][ T9731] loop1: detected capacity change from 0 to 128
[  225.149937][ T9731] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  225.178785][ T9731] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  225.431281][ T9742] loop3: detected capacity change from 0 to 736
[  225.662426][ T9748] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  225.757020][ T9752] i2c i2c-0: delete_device: Extra parameters
[  225.826271][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'.
[  226.131250][   T32] audit: type=1400 audit(1789137438.098:21): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=9769 comm="syz.0.1440" name="p" offset=79
[  226.223997][ T5801] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  226.276743][   T54] Bluetooth: hci5: command 0x1003 tx timeout
[  226.276811][ T4933] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  226.385966][ T5801] usb 4-1: Using ep0 maxpacket: 32
[  226.387754][ T5801] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  226.390528][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.392078][ T5801] usb 4-1: config 0 descriptor??
[  226.630642][ T5801] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  226.643060][ T9782] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1446'.
[  226.720250][ T5801] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  226.722766][ T5801] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  226.722797][ T5801] usb 4-1: media controller created
[  226.803014][ T9787] loop1: detected capacity change from 0 to 128
[  226.838041][ T5801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  227.057478][ T5801] az6027: usb out operation failed. (-71)
[  227.057941][ T5801] az6027: usb out operation failed. (-71)
[  227.057949][ T5801] stb0899_attach: Driver disabled by Kconfig
[  227.057954][ T5801] az6027: no front-end attached
[  227.057954][ T5801] 
[  227.058243][ T5801] az6027: usb out operation failed. (-71)
[  227.058251][ T5801] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  227.064854][ T5801] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18
[  227.245690][ T5801] dvb-usb: schedule remote query interval to 400 msecs.
[  227.245707][ T5801] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  227.296228][ T5801] usb 4-1: USB disconnect, device number 17
[  227.509940][ T9802] loop1: detected capacity change from 0 to 4096
[  227.596389][ T9802] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  227.667334][ T9802] ntfs3(loop1): Failed to load $Extend (-22).
[  227.667350][ T9802] ntfs3(loop1): Failed to initialize $Extend.
[  227.774372][ T5824] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  227.820428][ T5801] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  227.858757][ T9811] loop3: detected capacity change from 0 to 64
[  227.925234][ T5824] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  227.929689][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.932119][ T5824] usb 1-1: config 0 descriptor??
[  228.662506][ T9826] loop1: detected capacity change from 0 to 4096
[  228.704198][ T9826] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  228.744820][ T5801] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  228.751205][ T9826] ntfs3(loop1): ino=19, mi_enum_attr
[  228.751222][ T9826] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  228.789179][ T9826] ntfs3(loop1): ino=1a, mi_enum_attr
[  228.789298][ T9826] ntfs3(loop1): ino=1a, mi_enum_attr
[  228.789308][ T9826] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  228.825903][ T5824] usb 1-1: Cannot set autoneg
[  228.826039][ T5824] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  228.859507][ T5824] usb 1-1: USB disconnect, device number 11
[  228.894138][ T5801] usb 5-1: Using ep0 maxpacket: 8
[  228.901159][ T5801] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  228.916766][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.916782][ T5801] usb 5-1: Product: syz
[  228.916789][ T5801] usb 5-1: Manufacturer: syz
[  228.916797][ T5801] usb 5-1: SerialNumber: syz
[  228.948709][ T5801] usb 5-1: config 0 descriptor??
[  229.024681][ T9826] ntfs3(loop1): ino=5, "/" ntfs_readdir
[  229.202011][ T5801] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  229.557059][ T9847] loop2: detected capacity change from 0 to 512
[  229.604343][ T9847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.604401][ T9847] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.644332][ T9847] EXT4-fs warning (device loop2): __ext4_ioctl:1564: Setting inode version is not supported with metadata_csum enabled.
[  229.691991][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.817012][ T5801] usb write operation failed. (-71)
[  229.820845][ T5801] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  229.821182][ T5801] dvbdev: DVB: registering new adapter (Terratec H7)
[  229.821264][ T5801] usb 5-1: media controller created
[  229.857247][ T5801] usb read operation failed. (-71)
[  229.859711][ T5801] usb write operation failed. (-71)
[  229.919921][ T5801] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  229.939140][ T5801] usb 5-1: USB disconnect, device number 11
[  229.956192][ T9859] loop2: detected capacity change from 0 to 512
[  230.002800][ T9859] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  230.002813][ T9859] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  230.002856][ T9859] System zones: 0-1, 15-15, 18-18, 34-34
[  230.003001][ T9859] EXT4-fs (loop2): orphan cleanup on readonly fs
[  230.042532][ T9859] Quota error (device loop2): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1792).
[  230.042603][ T9859] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  230.042618][ T9859] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  230.056126][ T9859] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.1479: bad orphan inode 16
[  230.056143][ T9859] loop2: lost filesystem error report for type 5 error -117
[  230.071296][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  230.071308][    C0] EXT4-fs (loop2): initial error at time 1789137442: ext4_orphan_get:1429
[  230.071321][    C0] EXT4-fs (loop2): last error at time 1789137442: ext4_orphan_get:1429
[  230.071768][ T9859] ext4_test_bit(bit=15, block=18) = 1
[  230.071778][ T9859] is_bad_inode(inode)=0
[  230.071782][ T9859] NEXT_ORPHAN(inode)=0
[  230.071786][ T9859] max_ino=32
[  230.071789][ T9859] i_nlink=2
[  230.072809][ T9859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  230.211388][ T9859] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1479: bg 0: block 15: invalid block bitmap
[  230.306919][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.368730][ T9869] veth0_to_bond: entered promiscuous mode
[  230.370395][ T9869] macsec1: entered promiscuous mode
[  230.385319][ T9869] macsec1: entered allmulticast mode
[  230.385331][ T9869] veth0_to_bond: entered allmulticast mode
[  230.659973][ T5801] kernel write not supported for file /659/projid_map (pid: 5801 comm: kworker/0:5)
[  230.739048][ T9875] loop3: detected capacity change from 0 to 4096
[  230.759941][ T9875] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  230.832457][ T9875] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  230.847591][ T9875] ntfs3(loop3): mft corrupted
[  230.847640][ T9875] ntfs3(loop3): Failed to load $Extend (-22).
[  230.847650][ T9875] ntfs3(loop3): Failed to initialize $Extend.
[  230.913520][   T32] audit: type=1800 audit(1789137442.878:22): pid=9875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1487" name="bus" dev="loop3" ino=33 res=0 errno=0
[  231.122080][ T9893] jffs2: notice: (9893) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  231.450280][ T9868] loop1: detected capacity change from 0 to 40427
[  231.494525][ T9868] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  231.494542][ T9868] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  231.786276][ T9868] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  231.848801][ T9920] vxcan1: tx drop: invalid da for name 0x0000000000000015
[  231.915385][ T9868] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  231.915403][ T9868] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  232.103245][ T9931] input: syz0 as /devices/virtual/input/input19
[  232.807790][ T9951] loop0: detected capacity change from 0 to 4096
[  232.847428][ T9951] ntfs3(loop0): Failed to load $MFT (-22).
[  233.556879][ T9950] loop3: detected capacity change from 0 to 32768
[  233.586031][ T9950] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  233.632788][ T9950] XFS (loop3): Ending clean mount
[  233.641732][ T5801] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  233.709464][ T9961] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.788576][ T5801] usb 5-1: Using ep0 maxpacket: 8
[  233.794999][ T5801] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  233.798218][ T5801] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  233.798233][ T5801] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  233.798243][ T5801] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  233.798253][ T5801] usb 5-1: config 250 has no interface number 0
[  233.798276][ T5801] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  233.798289][ T5801] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  233.798300][ T5801] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 11
[  233.798311][ T5801] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  233.798323][ T5801] usb 5-1: config 250 interface 228 has no altsetting 0
[  233.830631][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  233.830647][ T5801] usb 5-1: Product: syz
[  233.830654][ T5801] usb 5-1: SerialNumber: syz
[  234.025189][ T5801] hub 5-1:250.228: bad descriptor, ignoring hub
[  234.025206][ T5801] hub 5-1:250.228: probe with driver hub failed with error -5
[  234.059953][ T5619] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  234.212376][ T5801] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  234.313039][ T9961] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.534778][    C0] usblp0: nonzero read bulk status received: -71
[  234.537546][ T9548] usb 5-1: USB disconnect, device number 12
[  234.581465][ T9548] usblp0: removed
[  234.690092][ T9961] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.842544][ T9961] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.907976][ T9986] loop2: detected capacity change from 0 to 32768
[  235.414062][   T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.604190][ T1157] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.604218][ T1157] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.604236][ T1157] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.792606][T10023] loop0: detected capacity change from 0 to 1024
[  235.972051][T10027] loop2: detected capacity change from 0 to 256
[  235.987960][T10027] exfat: Deprecated parameter 'utf8'
[  235.987989][T10027] exfat: Deprecated parameter 'namecase'
[  235.988039][T10027] exfat: Deprecated parameter 'namecase'
[  235.988051][T10027] exfat: Deprecated parameter 'utf8'
[  236.071821][T10027] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc89da420, utbl_chksum : 0xe619d30d)
[  236.071997][T10027] exFAT-fs (loop2): failed to test first cluster bit of root dir(5)
[  236.192313][T10009] loop3: detected capacity change from 0 to 40427
[  236.242854][T10009] F2FS-fs (loop3): build fault injection rate: 174
[  236.242870][T10009] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  236.273065][T10009] F2FS-fs (loop3): invalid crc value
[  236.426408][T10035] loop2: detected capacity change from 0 to 1024
[  236.521693][T10017] loop4: detected capacity change from 0 to 32768
[  236.538561][T10017] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1546 (10017)
[  236.600641][T10017] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  236.600663][T10017] BTRFS info (device loop4): using sha256 checksum algorithm
[  236.630549][T10039] loop1: detected capacity change from 0 to 512
[  236.643003][T10009] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  236.757770][T10009] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  236.844821][T10017] BTRFS info (device loop4): rebuilding free space tree
[  236.901674][T10017] BTRFS info (device loop4): disabling free space tree
[  236.901717][T10017] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  236.901729][T10017] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  236.950495][T10017] BTRFS info (device loop4): setting nodatasum
[  236.950510][T10017] BTRFS info (device loop4): setting nodatacow
[  236.950519][T10017] BTRFS info (device loop4): enabling ssd optimizations
[  236.950526][T10017] BTRFS info (device loop4): using spread ssd allocation scheme
[  236.950534][T10017] BTRFS info (device loop4): turning off barriers
[  236.950542][T10017] BTRFS info (device loop4): turning on flush-on-commit
[  236.950549][T10017] BTRFS info (device loop4): turning on sync discard
[  236.950557][T10017] BTRFS info (device loop4): force clearing of disk cache
[  237.210661][ T5613] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  237.406191][T10067] loop2: detected capacity change from 0 to 256
[  237.415486][T10063] overlayfs: failed to clone lowerpath
[  237.423159][T10067] exfat: Deprecated parameter 'utf8'
[  237.462669][T10067] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  237.520781][   T32] audit: type=1807 audit(1789137449.488:23): action=measure func=FÉLE_CHECK res=0
[  237.610927][   T32] audit: type=1802 audit(1789137449.578:24): pid=10066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1559" res=0 errno=0
[  237.612817][T10064] ima: policy update failed
[  237.613025][   T32] audit: type=1802 audit(1789137449.578:25): pid=10064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1559" res=0 errno=0
[  237.874142][T10037] loop0: detected capacity change from 0 to 32768
[  237.881450][T10037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1552 (10037)
[  237.917437][T10037] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  237.917456][T10037] BTRFS info (device loop0): using sha256 checksum algorithm
[  238.113937][T10037] BTRFS info (device loop0): turning on flush-on-commit
[  238.113954][T10037] BTRFS info (device loop0): turning on async discard
[  238.113962][T10037] BTRFS info (device loop0): enabling free space tree
[  238.143725][ T9548] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  238.295650][ T9548] usb 5-1: Using ep0 maxpacket: 8
[  238.296764][ T9548] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  238.299379][ T9548] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.299408][ T9548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.300553][ T5631] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  238.301195][ T9548] usb 5-1: config 0 descriptor??
[  238.368653][ T9548] gspca_main: vc032x-2.14.0 probing 046d:0892
[  239.050730][T10107] xt_hashlimit: size too large, truncated to 1048576
[  239.150327][ T9548] gspca_vc032x: reg_w err -71
[  239.150376][ T9548] vc032x 5-1:0.0: probe with driver vc032x failed with error -71
[  239.179528][ T9548] usb 5-1: USB disconnect, device number 13
[  239.523454][T10118] loop1: detected capacity change from 0 to 256
[  239.547391][T10118] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  239.604903][   T32] audit: type=1800 audit(1789137451.578:26): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1576" name="file1" dev="loop1" ino=1048680 res=0 errno=0
[  239.646481][   T32] audit: type=1800 audit(1789137451.618:27): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1576" name="file1" dev="loop1" ino=1048680 res=0 errno=0
[  239.772625][T10119] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  239.772643][T10119] FAT-fs (loop1): Filesystem has been set read-only
[  239.772678][T10119] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  239.905827][T10123] exfat: Deprecated parameter 'utf8'
[  239.905841][T10123] exfat: Deprecated parameter 'utf8'
[  239.905884][T10123] exfat: Deprecated parameter 'namecase'
[  239.961565][T10123] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d)
[  240.586908][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  240.734246][    T9] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  240.746693][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  240.746721][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.775229][    T9] usb 1-1: config 0 descriptor??
[  240.794656][T10131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  241.085904][T10157] set_capacity_and_notify: 1 callbacks suppressed
[  241.085918][T10157] loop2: detected capacity change from 0 to 512
[  241.108356][T10157] EXT4-fs: Ignoring removed i_version option
[  241.108384][T10157] EXT4-fs: Ignoring removed oldalloc option
[  241.110128][T10157] EXT4-fs (loop2): Test dummy encryption mode enabled
[  241.156000][T10157] EXT4-fs (loop2): 1 truncate cleaned up
[  241.176835][T10157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.305112][    T9] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  241.305143][    T9] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  241.305157][    T9] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  241.305172][    T9] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  241.305186][    T9] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  241.305200][    T9] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  241.305214][    T9] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  241.305227][    T9] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  241.305241][    T9] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  241.305255][    T9] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0
[  241.405346][T10162] loop4: detected capacity change from 0 to 1024
[  241.448393][    T9] asus 0003:0B05:1ABE.0008: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.0-1/input0
[  241.481844][    T9] usb 1-1: USB disconnect, device number 12
[  241.538028][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.720965][T10167] fido_id[10167]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  241.780102][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1597'.
[  241.813380][T10173] loop4: detected capacity change from 0 to 512
[  241.859852][T10173] EXT4-fs (loop4): orphan cleanup on readonly fs
[  241.883503][T10173] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.1598: ea_inode with extended attributes
[  241.883522][T10173] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  241.883708][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  241.883720][    C0] EXT4-fs (loop4): initial error at time 1789137453: ext4_xattr_inode_iget:437: inode 11
[  241.883737][    C0] EXT4-fs (loop4): last error at time 1789137453: ext4_xattr_inode_iget:437: inode 11
[  241.948497][T10173] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1598: error while reading EA inode 11 err=-117
[  241.948517][T10173] loop4: lost filesystem error report for type 5 error -117
[  241.950763][T10173] EXT4-fs (loop4): 1 orphan inode deleted
[  241.951747][T10173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  242.067367][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.170061][    T9] hsr0: entered promiscuous mode
[  242.242494][T10181] loop4: detected capacity change from 0 to 512
[  242.256336][T10181] EXT4-fs: Ignoring removed nomblk_io_submit option
[  242.305876][T10181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.332131][T10181] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  242.474537][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.084787][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  243.238981][    T9] usb 3-1: Using ep0 maxpacket: 32
[  243.240855][    T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00
[  243.243534][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.271579][    T9] usb 3-1: config 0 descriptor??
[  243.723621][    T9] hid (null): report_id 0 is invalid
[  243.775711][    T9] hid-corsair-void 0003:1B1C:1B27.0009: report_id 0 is invalid
[  243.775727][    T9] hid-corsair-void 0003:1B1C:1B27.0009: item 0 1 1 8 parsing failed
[  243.776105][    T9] hid-corsair-void 0003:1B1C:1B27.0009: parse failed (reason: -22)
[  243.776161][    T9] hid-corsair-void 0003:1B1C:1B27.0009: probe with driver hid-corsair-void failed with error -22
[  243.910985][T10209] loop0: detected capacity change from 0 to 32768
[  243.923018][ T5801] usb 3-1: USB disconnect, device number 7
[  243.945574][T10238] loop4: detected capacity change from 0 to 64
[  243.968646][T10209] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  244.038614][T10209] XFS (loop0): Ending clean mount
[  244.226119][ T5631] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  244.529460][T10257] loop0: detected capacity change from 0 to 512
[  244.640890][T10254] loop3: detected capacity change from 0 to 4096
[  244.749561][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'.
[  244.797892][T10260] vlan2: entered allmulticast mode
[  244.797906][T10260] macsec0: entered allmulticast mode
[  244.797913][T10260] veth1_macvtap: entered allmulticast mode
[  244.821662][T10260] batman_adv: batadv0: Adding interface: vlan2
[  244.821672][T10260] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  244.821687][T10260] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  245.580785][T10255] loop1: detected capacity change from 0 to 32768
[  245.620860][T10255] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  245.756079][T10255] XFS (loop1): Ending clean mount
[  245.916173][ T5615] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  246.313208][T10271] loop3: detected capacity change from 0 to 32768
[  246.349757][T10271] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1639 (10271)
[  246.375263][T10271] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  246.375282][T10271] BTRFS info (device loop3): using sha256 checksum algorithm
[  246.482486][T10271] BTRFS info (device loop3): rebuilding free space tree
[  246.533026][T10273] loop2: detected capacity change from 0 to 32768
[  246.556905][T10273] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1641 (10273)
[  246.594886][T10273] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  246.594906][T10273] BTRFS info (device loop2): using crc32c checksum algorithm
[  246.770939][T10271] BTRFS info (device loop3): disabling free space tree
[  246.770979][T10271] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  246.770990][T10271] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  246.806442][T10327] loop4: detected capacity change from 0 to 256
[  246.829846][T10273] BTRFS info (device loop2): enabling ssd optimizations
[  246.829861][T10273] BTRFS info (device loop2): turning on flush-on-commit
[  246.829870][T10273] BTRFS info (device loop2): enabling free space tree
[  246.829877][T10273] BTRFS info (device loop2): enabling auto defrag
[  246.829887][T10273] BTRFS info (device loop2): use lzo compression, level 1
[  246.829896][T10273] BTRFS info (device loop2): max_inline set to 4096
[  246.891297][T10327] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d)
[  247.010699][T10271] BTRFS info (device loop3): setting nodatasum
[  247.010715][T10271] BTRFS info (device loop3): setting nodatacow
[  247.010724][T10271] BTRFS info (device loop3): enabling ssd optimizations
[  247.010732][T10271] BTRFS info (device loop3): using spread ssd allocation scheme
[  247.010740][T10271] BTRFS info (device loop3): turning off barriers
[  247.010748][T10271] BTRFS info (device loop3): turning on flush-on-commit
[  247.010756][T10271] BTRFS info (device loop3): turning on sync discard
[  247.010764][T10271] BTRFS info (device loop3): force clearing of disk cache
[  247.329595][ T5619] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  247.440865][    T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  247.606024][    T9] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  247.606486][    T9] usb 1-1: config 0 has no interfaces?
[  247.606504][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.608153][    T9] usb 1-1: config 0 descriptor??
[  247.762980][ T5614] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  247.778943][    T9] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  247.841836][ T5801] usb 1-1: USB disconnect, device number 13
[  247.890427][T10349] kAFS: Invalid Command on /proc/fs/afs/cells file
[  247.925679][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  247.925701][    T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  247.926691][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  247.926718][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  247.926729][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  247.926749][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.930002][    T9] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[  248.016849][    T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  248.016927][    T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  248.148815][    T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  248.165162][    T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[  248.172551][    T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[  248.196112][    T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  248.339815][T10353] loop3: detected capacity change from 0 to 256
[  248.377132][T10353] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d)
[  248.457947][T10353] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff)
[  248.980889][    T9] usb 5-1: USB disconnect, device number 14
[  249.027113][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  249.089871][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  249.090312][    T9] keyspan 5-1:1.0: device disconnected
[  249.149484][T10369] loop3: detected capacity change from 0 to 128
[  249.210420][T10369] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  249.210645][T10369] ext4 filesystem being mounted at /336/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  249.371539][ T5619] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  249.826459][T10360] loop1: detected capacity change from 0 to 32768
[  249.841800][T10360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1662 (10360)
[  249.870053][T10360] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  249.870072][T10360] BTRFS info (device loop1): using sha256 checksum algorithm
[  250.092430][T10360] BTRFS info (device loop1): enabling ssd optimizations
[  250.092449][T10360] BTRFS info (device loop1): turning on async discard
[  250.092457][T10360] BTRFS info (device loop1): enabling free space tree
[  250.273426][ T5615] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  250.831838][T10388] loop0: detected capacity change from 0 to 32768
[  250.869029][T10388] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  250.920899][T10388] XFS (loop0): Ending clean mount
[  251.046489][T10388] XFS (loop0): Quotacheck needed: Please wait.
[  251.142863][T10429] loop4: detected capacity change from 0 to 512
[  251.232440][  T252] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  251.513412][T10388] XFS (loop0): Quotacheck: Done.
[  251.594188][T10413] loop1: detected capacity change from 0 to 32768
[  251.789708][ T5631] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  251.886772][T10441] loop2: detected capacity change from 0 to 1024
[  251.953941][T10441] syz.2.1687: attempt to access beyond end of device
[  251.953941][T10441] loop2: rw=8388608, sector=5778, nr_sectors = 2 limit=1024
[  251.953962][T10441] Buffer I/O error on dev loop2, logical block 2889, async page read
[  251.953991][T10441] syz.2.1687: attempt to access beyond end of device
[  251.953991][T10441] loop2: rw=8388608, sector=5778, nr_sectors = 2 limit=1024
[  251.954003][T10441] Buffer I/O error on dev loop2, logical block 2889, async page read
[  251.954150][   T32] audit: type=1800 audit(1789137463.928:28): pid=10441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1687" name="file1" dev="loop2" ino=20 res=0 errno=0
[  252.044634][   T32] audit: type=1800 audit(1789137464.008:29): pid=10441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1687" name="file1" dev="loop2" ino=20 res=0 errno=0
[  252.350520][T10445] kernel read not supported for file /eth0 (pid: 10445 comm: syz.2.1691)
[  252.366872][   T32] audit: type=1800 audit(1789137464.318:30): pid=10445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1691" name="eth0" dev="mqueue" ino=24943 res=0 errno=0
[  252.394529][ T5801] kernel read not supported for file /vcs (pid: 5801 comm: kworker/0:5)
[  252.688910][T10437] loop3: detected capacity change from 0 to 40427
[  252.699749][T10437] F2FS-fs (loop3): build fault injection rate: 14
[  252.699763][T10437] F2FS-fs (loop3): build fault injection type: 0x30e4
[  252.720356][T10437] F2FS-fs (loop3): invalid crc value
[  252.784092][ T5824] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[  252.818883][T10437] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  252.937754][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short
[  252.937784][ T5824] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29
[  252.938617][ T5824] usb 3-1: config 8 has an invalid interface number: 109 but max is 0
[  252.938631][ T5824] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  252.938640][ T5824] usb 3-1: config 8 has no interface number 0
[  252.938661][ T5824] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8
[  252.938674][ T5824] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  252.938686][ T5824] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8
[  252.942788][ T5824] usb 3-1: string descriptor 0 read error: -22
[  252.942863][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.043511][T10451] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  253.058518][ T5824] metro_usb 3-1:8.109: Metrologic USB to Serial converter detected
[  253.081441][ T5824] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  253.182785][T10437] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  253.258196][T10437] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  253.309042][ T5824] usb 3-1: USB disconnect, device number 8
[  253.339713][T10437] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0
[  253.357733][ T5824] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  253.378534][ T5824] metro_usb 3-1:8.109: device disconnected
[  253.442135][T10466] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_find_data_folio+0x3a3/0x6d0
[  253.536056][ T5619] syz-executor: attempt to access beyond end of device
[  253.536056][ T5619] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  253.542275][ T5619] CPU: 0 UID: 0 PID: 5619 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  253.542295][ T5619] Tainted: [L]=SOFTLOCKUP
[  253.542299][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  253.542316][ T5619] Call Trace:
[  253.542321][ T5619]  <TASK>
[  253.542326][ T5619]  dump_stack_lvl+0xe8/0x150
[  253.542346][ T5619]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  253.542362][ T5619]  f2fs_write_end_bio+0x1211/0x16e0
[  253.542377][ T5619]  ? blkg_put+0x22/0x240
[  253.542396][ T5619]  __submit_merged_bio+0x258/0x6a0
[  253.542407][ T5619]  ? rcu_is_watching+0x16/0xb0
[  253.542423][ T5619]  __submit_merged_write_cond+0x3c9/0x4e0
[  253.542439][ T5619]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  253.542462][ T5619]  f2fs_write_data_pages+0x2a1d/0x36f0
[  253.542475][ T5619]  ? __lock_acquire+0x747/0x2de0
[  253.542504][ T5619]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  253.542516][ T5619]  ? is_bpf_text_address+0x26/0x2b0
[  253.542535][ T5619]  ? arch_stack_walk+0xfb/0x150
[  253.542563][ T5619]  ? add_lock_to_list+0xc7/0x100
[  253.542577][ T5619]  ? lockdep_unlock+0x5c/0xd0
[  253.542586][ T5619]  ? __lock_acquire+0x1511/0x2de0
[  253.542611][ T5619]  ? do_raw_spin_lock+0x12b/0x2f0
[  253.542630][ T5619]  ? do_raw_spin_unlock+0xf5/0x200
[  253.542645][ T5619]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  253.542658][ T5619]  do_writepages+0x338/0x560
[  253.542675][ T5619]  ? do_raw_spin_unlock+0xf5/0x200
[  253.542692][ T5619]  filemap_fdatawrite+0x1e9/0x2f0
[  253.542707][ T5619]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  253.542742][ T5619]  ? do_raw_spin_unlock+0xf5/0x200
[  253.542759][ T5619]  f2fs_sync_dirty_inodes+0x30e/0x830
[  253.542780][ T5619]  f2fs_write_checkpoint+0xa38/0x2710
[  253.542793][ T5619]  ? __lock_acquire+0x747/0x2de0
[  253.542820][ T5619]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  253.542861][ T5619]  kill_f2fs_super+0x2dd/0x700
[  253.542879][ T5619]  ? __pfx_kill_f2fs_super+0x10/0x10
[  253.542898][ T5619]  ? call_rcu+0x64d/0x8b0
[  253.542910][ T5619]  ? lockdep_hardirqs_on+0x7b/0x110
[  253.542929][ T5619]  deactivate_locked_super+0xbc/0x110
[  253.542948][ T5619]  cleanup_mnt+0x3d3/0x460
[  253.542964][ T5619]  task_work_run+0x1d9/0x260
[  253.542978][ T5619]  ? __pfx_task_work_run+0x10/0x10
[  253.542994][ T5619]  exit_to_user_mode_loop+0x204/0x770
[  253.543007][ T5619]  ? rcu_is_watching+0x16/0xb0
[  253.543021][ T5619]  do_syscall_64+0x328/0x520
[  253.543031][ T5619]  ? trace_irq_disable+0x3b/0x140
[  253.543042][ T5619]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.543053][ T5619]  ? clear_bhb_loop+0x70/0xc0
[  253.543065][ T5619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.543075][ T5619] RIP: 0033:0x7f5ed199f397
[  253.543086][ T5619] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  253.543095][ T5619] RSP: 002b:00007ffc0eca03a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  253.543106][ T5619] RAX: 0000000000000000 RBX: 00007f5ed1a3448b RCX: 00007f5ed199f397
[  253.543113][ T5619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0eca0460
[  253.543119][ T5619] RBP: 00007ffc0eca0460 R08: 00007ffc0eca1460 R09: 00000000ffffffff
[  253.543125][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0eca14f0
[  253.543132][ T5619] R13: 00007f5ed1a3448b R14: 000000000003ddf8 R15: 00007ffc0eca1530
[  253.543148][ T5619]  </TASK>
[  253.543153][ T5619] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  254.052786][T10455] loop0: detected capacity change from 0 to 32768
[  254.067476][T10455] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1695 (10455)
[  254.092315][T10455] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  254.092334][T10455] BTRFS info (device loop0): using sha256 checksum algorithm
[  254.211843][T10477] loop1: detected capacity change from 0 to 2048
[  254.238832][T10477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  254.324994][T10455] BTRFS info (device loop0): turning off barriers
[  254.325009][T10455] BTRFS info (device loop0): enabling free space tree
[  254.520005][ T5631] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  254.951281][T10503] loop3: detected capacity change from 0 to 256
[  254.981445][T10503] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  255.366021][T10517] loop4: detected capacity change from 0 to 512
[  255.366423][T10517] EXT4-fs: Ignoring removed bh option
[  255.413154][T10517] EXT4-fs error (device loop4): __ext4_iget:5592: inode #15: block 1803188595: comm syz.4.1712: invalid block
[  255.413176][T10517] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  255.413684][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  255.413698][    C0] EXT4-fs (loop4): initial error at time 1789137467: __ext4_iget:5592: inode 15: block 1803188595
[  255.413717][    C0] EXT4-fs (loop4): last error at time 1789137467: __ext4_iget:5592: inode 15: block 1803188595
[  255.437509][T10517] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1712: couldn't read orphan inode 15 (err -117)
[  255.437527][T10517] loop4: lost filesystem error report for type 5 error -117
[  255.469928][T10517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.641113][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  255.641146][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  255.680521][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.144253][ T5801] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  256.198198][   T32] audit: type=1400 audit(1789137468.168:31): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=10543 comm="syz.1.1725" name="p" offset=69
[  256.304898][ T5801] usb 1-1: Using ep0 maxpacket: 32
[  256.305361][ T5801] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  256.308070][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.308083][ T5801] usb 1-1: Product: syz
[  256.308091][ T5801] usb 1-1: Manufacturer: syz
[  256.308098][ T5801] usb 1-1: SerialNumber: syz
[  256.315099][ T5801] usb 1-1: config 0 descriptor??
[  256.382898][ T5801] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  256.431793][T10552] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1728'.
[  256.470159][T10549] loop2: detected capacity change from 0 to 2048
[  256.520913][T10555] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1730'.
[  256.565042][T10549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.809379][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.248505][ T5801] gspca_ov534_9: reg_w failed -71
[  257.438458][T10581] loop2: detected capacity change from 0 to 764
[  257.534371][ T5801] gspca_ov534_9: Unknown sensor 0000
[  257.534427][ T5801] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  257.540466][ T5801] usb 1-1: USB disconnect, device number 14
[  257.576897][T10581] isofs: Unable to find the "." directory for NFS.
[  257.668338][T10561] loop4: detected capacity change from 0 to 40427
[  257.682245][T10561] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  257.682261][T10561] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  257.682423][T10561] F2FS-fs (loop4): Image doesn't support compression
[  257.711553][T10561] F2FS-fs (loop4): invalid crc value
[  257.993133][T10561] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  258.027958][T10594] block2mtd: error: cannot open device 
[  258.085293][T10561] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  258.085316][T10561] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  258.085330][T10561] F2FS-fs (loop4): Start checkpoint disabled!
[  258.254353][T10561] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  258.256716][T10561] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  258.256731][T10561] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  258.407052][  T252] kworker/u8:7: attempt to access beyond end of device
[  258.407052][  T252] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  258.407099][  T252] CPU: 0 UID: 0 PID: 252 Comm: kworker/u8:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  258.407113][  T252] Tainted: [L]=SOFTLOCKUP
[  258.407117][  T252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  258.407124][  T252] Workqueue: writeback wb_workfn (flush-7:4)
[  258.407159][  T252] Call Trace:
[  258.407163][  T252]  <TASK>
[  258.407168][  T252]  dump_stack_lvl+0xe8/0x150
[  258.407185][  T252]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  258.407200][  T252]  f2fs_write_end_bio+0x1211/0x16e0
[  258.407215][  T252]  ? blkg_put+0x22/0x240
[  258.407234][  T252]  __submit_merged_bio+0x258/0x6a0
[  258.407245][  T252]  ? rcu_is_watching+0x16/0xb0
[  258.407261][  T252]  __submit_merged_write_cond+0x3c9/0x4e0
[  258.407277][  T252]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  258.407300][  T252]  f2fs_write_data_pages+0x2a1d/0x36f0
[  258.407331][  T252]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  258.407351][  T252]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  258.407382][  T252]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  258.407404][  T252]  ? __lock_acquire+0x747/0x2de0
[  258.407427][  T252]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  258.407440][  T252]  do_writepages+0x338/0x560
[  258.407457][  T252]  ? reacquire_held_locks+0x117/0x1a0
[  258.407469][  T252]  ? writeback_sb_inodes+0x450/0x1af0
[  258.407482][  T252]  __writeback_single_inode+0x136/0x1220
[  258.407496][  T252]  ? do_raw_spin_unlock+0xf5/0x200
[  258.407513][  T252]  writeback_sb_inodes+0x9de/0x1af0
[  258.407522][  T252]  ? __lock_acquire+0x747/0x2de0
[  258.407541][  T252]  ? lock_acquire+0x115/0x350
[  258.407555][  T252]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  258.407594][  T252]  ? rcu_is_watching+0x16/0xb0
[  258.407606][  T252]  ? queue_io+0x2d3/0x470
[  258.407618][  T252]  wb_writeback+0x41c/0xad0
[  258.407629][  T252]  ? queue_io+0x2d1/0x470
[  258.407642][  T252]  ? __pfx_wb_writeback+0x10/0x10
[  258.407650][  T252]  ? do_raw_spin_lock+0x12b/0x2f0
[  258.407673][  T252]  wb_workfn+0x431/0x10f0
[  258.407695][  T252]  ? __pfx_wb_workfn+0x10/0x10
[  258.407711][  T252]  ? trace_hrtimer_start+0x82/0x200
[  258.407725][  T252]  ? do_raw_spin_lock+0x12b/0x2f0
[  258.407743][  T252]  ? lock_acquire+0x115/0x350
[  258.407758][  T252]  ? rcu_is_watching+0x16/0xb0
[  258.407772][  T252]  ? process_scheduled_works+0x97a/0x1630
[  258.407787][  T252]  process_scheduled_works+0xc3d/0x1630
[  258.407817][  T252]  ? __pfx_process_scheduled_works+0x10/0x10
[  258.407835][  T252]  ? assign_work+0x3cf/0x5d0
[  258.407851][  T252]  worker_thread+0xa47/0xfb0
[  258.407872][  T252]  ? __kthread_parkme+0x71/0x1f0
[  258.407892][  T252]  kthread+0x38b/0x480
[  258.407904][  T252]  ? __pfx_worker_thread+0x10/0x10
[  258.407916][  T252]  ? __pfx_kthread+0x10/0x10
[  258.407927][  T252]  ret_from_fork+0x514/0xb70
[  258.407939][  T252]  ? __pfx_ret_from_fork+0x10/0x10
[  258.407949][  T252]  ? __switch_to+0xc89/0x1420
[  258.407964][  T252]  ? __pfx_kthread+0x10/0x10
[  258.407976][  T252]  ret_from_fork_asm+0x1a/0x30
[  258.407999][  T252]  </TASK>
[  258.409146][  T252] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  258.755083][T10604] loop0: detected capacity change from 0 to 256
[  258.790155][T10604] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  258.948513][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'.
[  259.074057][ T5801] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  259.224359][ T5801] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  259.227758][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  259.227774][ T5801] usb 4-1: Product: syz
[  259.227781][ T5801] usb 4-1: SerialNumber: syz
[  259.229373][ T5801] usb 4-1: config 0 descriptor??
[  259.454641][ T5801] hso 4-1:0.0: Failed to find BULK eps
[  259.546766][T10621] loop4: detected capacity change from 0 to 1024
[  259.602145][   T32] audit: type=1800 audit(1789137471.568:32): pid=10621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1754" name="file1" dev="loop4" ino=20 res=0 errno=0
[  259.641919][T10623] loop1: detected capacity change from 0 to 2048
[  259.692033][ T5801] usb 4-1: USB disconnect, device number 18
[  259.724134][T10623] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  259.746587][T10623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.093243][T10631] netlink: 'syz.4.1764': attribute type 1 has an invalid length.
[  260.093257][T10631] netlink: 'syz.4.1764': attribute type 2 has an invalid length.
[  260.217012][T10617] loop0: detected capacity change from 0 to 40427
[  260.217431][T10617] F2FS-fs: heap/no_heap options were deprecated
[  260.241878][T10617] F2FS-fs (loop0): build fault injection rate: 19
[  260.241893][T10617] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  260.263233][T10617] F2FS-fs (loop0): invalid crc value
[  260.295531][T10635] bond0: unable to remove nonexistent ARP target 192.168.1.1
[  260.295549][T10635] bond0: option arp_ip_target: invalid value (-192.168.1.1)
[  260.362075][T10617] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  260.545218][T10617] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  260.606928][T10617] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  260.700254][T10617] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  263.235331][T10681] loop1: detected capacity change from 0 to 40427
[  263.248958][T10681] F2FS-fs (loop1): invalid crc value
[  263.452177][T10706] loop4: detected capacity change from 0 to 256
[  263.465746][T10706] vfat: Deprecated parameter 'posix'
[  263.465758][T10706] FAT-fs: "posix" option is obsolete, not supported now
[  263.520255][   T32] audit: type=1800 audit(1789137475.488:33): pid=10706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1794" name="file1" dev="loop4" ino=1048686 res=0 errno=0
[  263.565402][T10681] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  263.677825][T10681] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  263.709029][T10681] syz.1.1784: attempt to access beyond end of device
[  263.709029][T10681] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  263.791957][ T5615] syz-executor: attempt to access beyond end of device
[  263.791957][ T5615] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  263.856531][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  263.856551][ T5615] Tainted: [L]=SOFTLOCKUP
[  263.856555][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  263.856561][ T5615] Call Trace:
[  263.856565][ T5615]  <TASK>
[  263.856570][ T5615]  dump_stack_lvl+0xe8/0x150
[  263.856590][ T5615]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  263.856607][ T5615]  f2fs_write_end_bio+0x1211/0x16e0
[  263.856621][ T5615]  ? blkg_put+0x22/0x240
[  263.856641][ T5615]  __submit_merged_bio+0x258/0x6a0
[  263.856652][ T5615]  ? rcu_is_watching+0x16/0xb0
[  263.856668][ T5615]  __submit_merged_write_cond+0x3c9/0x4e0
[  263.856684][ T5615]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  263.856708][ T5615]  f2fs_write_data_pages+0x2a1d/0x36f0
[  263.856720][ T5615]  ? __lock_acquire+0x747/0x2de0
[  263.856750][ T5615]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  263.856787][ T5615]  ? __bfs+0x153/0x290
[  263.856797][ T5615]  ? __pfx_hlock_conflict+0x10/0x10
[  263.856819][ T5615]  ? lockdep_unlock+0x5c/0xd0
[  263.856828][ T5615]  ? __lock_acquire+0x1511/0x2de0
[  263.856852][ T5615]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  263.856866][ T5615]  do_writepages+0x338/0x560
[  263.856883][ T5615]  ? do_raw_spin_unlock+0xf5/0x200
[  263.856900][ T5615]  filemap_fdatawrite+0x1e9/0x2f0
[  263.856915][ T5615]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  263.856952][ T5615]  ? do_raw_spin_unlock+0xf5/0x200
[  263.856968][ T5615]  f2fs_sync_dirty_inodes+0x30e/0x830
[  263.856989][ T5615]  f2fs_write_checkpoint+0xa38/0x2710
[  263.857002][ T5615]  ? __lock_acquire+0x747/0x2de0
[  263.857030][ T5615]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  263.857072][ T5615]  kill_f2fs_super+0x2dd/0x700
[  263.857089][ T5615]  ? __pfx_kill_f2fs_super+0x10/0x10
[  263.857111][ T5615]  ? call_rcu+0x64d/0x8b0
[  263.857130][ T5615]  ? lockdep_hardirqs_on+0x7b/0x110
[  263.857149][ T5615]  deactivate_locked_super+0xbc/0x110
[  263.857161][ T5615]  cleanup_mnt+0x3d3/0x460
[  263.857177][ T5615]  task_work_run+0x1d9/0x260
[  263.857191][ T5615]  ? __pfx_task_work_run+0x10/0x10
[  263.857208][ T5615]  exit_to_user_mode_loop+0x204/0x770
[  263.857220][ T5615]  ? rcu_is_watching+0x16/0xb0
[  263.857234][ T5615]  do_syscall_64+0x328/0x520
[  263.857245][ T5615]  ? trace_irq_disable+0x3b/0x140
[  263.857256][ T5615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.857266][ T5615]  ? clear_bhb_loop+0x70/0xc0
[  263.857279][ T5615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.857288][ T5615] RIP: 0033:0x7f0c5499f397
[  263.857299][ T5615] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  263.857308][ T5615] RSP: 002b:00007ffdd9cc51b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  263.857320][ T5615] RAX: 0000000000000000 RBX: 00007f0c54a3448b RCX: 00007f0c5499f397
[  263.857327][ T5615] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd9cc5270
[  263.857333][ T5615] RBP: 00007ffdd9cc5270 R08: 00007ffdd9cc6270 R09: 00000000ffffffff
[  263.857340][ T5615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd9cc6300
[  263.857346][ T5615] R13: 00007f0c54a3448b R14: 0000000000040625 R15: 00007ffdd9cc6340
[  263.857362][ T5615]  </TASK>
[  263.922406][ T5615] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  264.618701][T10702] loop2: detected capacity change from 0 to 32768
[  264.630777][T10702] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1791 (10702)
[  264.679103][T10702] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  264.679124][T10702] BTRFS info (device loop2): using blake2b checksum algorithm
[  264.798572][T10702] BTRFS info (device loop2): enabling ssd optimizations
[  264.798589][T10702] BTRFS info (device loop2): enabling free space tree
[  317.075748][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  317.075786][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  378.515305][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  378.515345][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  411.794002][   T33] INFO: task kworker/u8:9:1157 blocked in I/O wait for more than 143 seconds.
[  411.794029][   T33]       Tainted: G             L      syzkaller #0
[  411.794035][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  411.794043][   T33] task:kworker/u8:9    state:D stack:20840 pid:1157  tgid:1157  ppid:2      task_flags:0x4248060 flags:0x00080000
[  411.794074][   T33] Workqueue: writeback wb_workfn (flush-8:0)
[  411.794100][   T33] Call Trace:
[  411.794107][   T33]  <TASK>
[  411.794114][   T33]  __schedule+0x17dd/0x5940
[  411.794133][   T33]  ? blk_mq_flush_plug_list+0x415/0x540
[  411.794157][   T33]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  411.794176][   T33]  ? __blk_flush_plug+0x416/0x4d0
[  411.794191][   T33]  ? __pfx___schedule+0x10/0x10
[  411.794210][   T33]  ? schedule+0x90/0x2b0
[  411.794226][   T33]  schedule+0x164/0x2b0
[  411.794242][   T33]  io_schedule+0x7f/0xd0
[  411.794253][   T33]  rq_qos_wait+0x266/0x360
[  411.794266][   T33]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  411.794280][   T33]  ? __pfx_wbt_cleanup_cb+0x10/0x10
[  411.794294][   T33]  ? __pfx_rq_qos_wait+0x10/0x10
[  411.794306][   T33]  ? __pfx_rq_qos_wake_function+0x10/0x10
[  411.794318][   T33]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  411.794339][   T33]  wbt_wait+0x326/0x550
[  411.794354][   T33]  ? __pfx_wbt_wait+0x10/0x10
[  411.794368][   T33]  ? __pfx_dd_bio_merge+0x10/0x10
[  411.794382][   T33]  ? __pfx_wbt_wait+0x10/0x10
[  411.794394][   T33]  __rq_qos_throttle+0x6b/0xb0
[  411.794406][   T33]  blk_mq_submit_bio+0x1512/0x2a70
[  411.794423][   T33]  ? blk_mq_submit_bio+0x2fd/0x2a70
[  411.794441][   T33]  ? __pfx_blk_mq_submit_bio+0x10/0x10
[  411.794454][   T33]  ? blk_cgroup_bio_start+0x5d7/0x670
[  411.794468][   T33]  ? __pfx_blk_cgroup_bio_start+0x10/0x10
[  411.794481][   T33]  ? __submit_bio+0x7e/0x340
[  411.794492][   T33]  submit_bio_noacct_nocheck+0x2f4/0xa40
[  411.794511][   T33]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  411.794529][   T33]  ? submit_bio_noacct+0x104a/0x1b80
[  411.794545][   T33]  ? blkcg_set_ioprio+0x16b/0x2a0
[  411.794561][   T33]  ext4_io_submit+0x11b/0x190
[  411.794574][   T33]  ext4_do_writepages+0xba4/0x4770
[  411.794597][   T33]  ? kfree+0x1c5/0x650
[  411.794607][   T33]  ? ieee80211_inform_bss+0xbda/0x10d0
[  411.794630][   T33]  ? __pfx_ext4_do_writepages+0x10/0x10
[  411.794640][   T33]  ? __lock_acquire+0x747/0x2de0
[  411.794654][   T33]  ? __lock_acquire+0x747/0x2de0
[  411.794668][   T33]  ? __lock_acquire+0x747/0x2de0
[  411.794684][   T33]  ? lock_acquire+0x115/0x350
[  411.794705][   T33]  ext4_writepages+0x1fe/0x4e0
[  411.794720][   T33]  ? __pfx_ext4_writepages+0x10/0x10
[  411.794741][   T33]  ? do_raw_spin_unlock+0xf5/0x200
[  411.794756][   T33]  ? __pfx_ext4_writepages+0x10/0x10
[  411.794769][   T33]  do_writepages+0x338/0x560
[  411.794782][   T33]  ? do_raw_spin_lock+0x12b/0x2f0
[  411.794798][   T33]  ? reacquire_held_locks+0x117/0x1a0
[  411.794810][   T33]  ? writeback_sb_inodes+0x450/0x1af0
[  411.794823][   T33]  __writeback_single_inode+0x136/0x1220
[  411.794836][   T33]  ? do_raw_spin_unlock+0xf5/0x200
[  411.794852][   T33]  writeback_sb_inodes+0x9de/0x1af0
[  411.794876][   T33]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  411.794885][   T33]  ? stack_trace_save+0xa9/0x100
[  411.794917][   T33]  ? __pfx_down_read_trylock+0x10/0x10
[  411.794939][   T33]  __writeback_inodes_wb+0x114/0x240
[  411.794954][   T33]  wb_writeback+0x42f/0xad0
[  411.794966][   T33]  ? queue_io+0x2d1/0x470
[  411.794979][   T33]  ? __pfx_wb_writeback+0x10/0x10
[  411.794988][   T33]  ? do_raw_spin_lock+0x12b/0x2f0
[  411.795023][   T33]  wb_workfn+0xc92/0x10f0
[  411.795046][   T33]  ? __pfx_wb_workfn+0x10/0x10
[  411.795072][   T33]  ? lock_acquire+0x115/0x350
[  411.795087][   T33]  ? rcu_is_watching+0x16/0xb0
[  411.795101][   T33]  ? process_scheduled_works+0x97a/0x1630
[  411.795116][   T33]  process_scheduled_works+0xc3d/0x1630
[  411.795146][   T33]  ? __pfx_process_scheduled_works+0x10/0x10
[  411.795163][   T33]  ? assign_work+0x3cf/0x5d0
[  411.795179][   T33]  worker_thread+0xa47/0xfb0
[  411.795201][   T33]  ? __kthread_parkme+0x71/0x1f0
[  411.795221][   T33]  kthread+0x38b/0x480
[  411.795232][   T33]  ? __pfx_worker_thread+0x10/0x10
[  411.795245][   T33]  ? __pfx_kthread+0x10/0x10
[  411.795257][   T33]  ret_from_fork+0x514/0xb70
[  411.795273][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  411.795283][   T33]  ? __switch_to+0xc89/0x1420
[  411.795298][   T33]  ? __pfx_kthread+0x10/0x10
[  411.795310][   T33]  ret_from_fork_asm+0x1a/0x30
[  411.795334][   T33]  </TASK>
[  411.796971][   T33] INFO: task syz-executor:5602 blocked in I/O wait for more than 143 seconds.
[  411.796985][   T33]       Tainted: G             L      syzkaller #0
[  411.796991][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  411.796995][   T33] task:syz-executor    state:D stack:21888 pid:5602  tgid:5602  ppid:5601   task_flags:0x440100 flags:0x00080000
[  411.797029][   T33] Call Trace:
[  411.797032][   T33]  <TASK>
[  411.797040][   T33]  __schedule+0x17dd/0x5940
[  411.797066][   T33]  ? add_lock_to_list+0xc7/0x100
[  411.797082][   T33]  ? __lock_acquire+0x1511/0x2de0
[  411.797126][   T33]  ? __pfx___schedule+0x10/0x10
[  411.797147][   T33]  ? schedule+0x90/0x2b0
[  411.797163][   T33]  schedule+0x164/0x2b0
[  411.797179][   T33]  io_schedule+0x7f/0xd0
[  411.797190][   T33]  bit_wait_io+0x13/0x110
[  411.797201][   T33]  __wait_on_bit+0xac/0x300
[  411.797211][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  411.797223][   T33]  out_of_line_wait_on_bit+0x13b/0x190
[  411.797235][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  411.797245][   T33]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  411.797257][   T33]  ? __pfx_wake_bit_function+0x10/0x10
[  411.797276][   T33]  do_get_write_access+0x658/0x10c0
[  411.797299][   T33]  jbd2_journal_get_write_access+0x1d7/0x230
[  411.797313][   T33]  __ext4_journal_get_write_access+0xec/0x620
[  411.797329][   T33]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  411.797341][   T33]  ? trace_kmem_cache_alloc+0x29/0xe0
[  411.797352][   T33]  ? jbd2__journal_start+0x145/0x5d0
[  411.797368][   T33]  ext4_reserve_inode_write+0x294/0x360
[  411.797384][   T33]  __ext4_mark_inode_dirty+0x141/0x7b0
[  411.797405][   T33]  ext4_dirty_inode+0xd0/0x110
[  411.797417][   T33]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  411.797428][   T33]  __mark_inode_dirty+0x3a8/0x13b0
[  411.797445][   T33]  file_update_time_flags+0x399/0x440
[  411.797461][   T33]  ext4_page_mkwrite+0x21f/0x12c0
[  411.797473][   T33]  ? reacquire_held_locks+0x117/0x1a0
[  411.797493][   T33]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  411.797504][   T33]  ? __lock_acquire+0x747/0x2de0
[  411.797523][   T33]  do_page_mkwrite+0x147/0x310
[  411.797538][   T33]  do_wp_page+0x1a97/0x4b70
[  411.797558][   T33]  ? __pfx_do_wp_page+0x10/0x10
[  411.797566][   T33]  ? do_raw_spin_lock+0x12b/0x2f0
[  411.797582][   T33]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  411.797601][   T33]  handle_mm_fault+0x15d7/0x3750
[  411.797618][   T33]  ? handle_mm_fault+0xf1/0x3750
[  411.797633][   T33]  ? __pfx_handle_mm_fault+0x10/0x10
[  411.797643][   T33]  ? lock_vma_under_rcu+0x45a/0x500
[  411.797654][   T33]  ? __pfx_set_user_sigmask+0x10/0x10
[  411.797679][   T33]  do_user_addr_fault+0xb35/0x1480
[  411.797696][   T33]  ? trace_page_fault_user+0x84/0x1e0
[  411.797707][   T33]  exc_page_fault+0x6a/0xc0
[  411.797718][   T33]  asm_exc_page_fault+0x26/0x30
[  411.797729][   T33] RIP: 0033:0x7f68e727c6e2
[  411.797739][   T33] RSP: 002b:00007ffccf465f10 EFLAGS: 00010202
[  411.797748][   T33] RAX: 00007f68e528c000 RBX: 000055558b6395c0 RCX: 0000000000000002
[  411.797755][   T33] RDX: 000000000000322a RSI: 000055558b6a76a8 RDI: 0000000000000004
[  411.797761][   T33] RBP: 00007ffccf466410 R08: 000055558b6a7918 R09: 00000000000000a4
[  411.797768][   T33] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffccf466250
[  411.797775][   T33] R13: 00007ffccf466040 R14: 585858582e7a7973 R15: 00007ffccf465f90
[  411.797791][   T33]  </TASK>
[  411.797820][   T33] INFO: task syz.0.1789:10692 blocked in I/O wait for more than 143 seconds.
[  411.797829][   T33]       Tainted: G             L      syzkaller #0
[  411.797835][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  411.797839][   T33] task:syz.0.1789      state:D stack:23400 pid:10692 tgid:10692 ppid:5631   task_flags:0x440040 flags:0x00080002
[  411.797865][   T33] Call Trace:
[  411.797869][   T33]  <TASK>
[  411.797875][   T33]  __schedule+0x17dd/0x5940
[  411.797897][   T33]  ? lock_acquire+0x115/0x350
[  411.797909][   T33]  ? __lock_acquire+0x747/0x2de0
[  411.797923][   T33]  ? __pfx___schedule+0x10/0x10
[  411.797943][   T33]  ? schedule+0x90/0x2b0
[  411.797959][   T33]  schedule+0x164/0x2b0
[  411.797975][   T33]  io_schedule+0x7f/0xd0
[  411.797985][   T33]  bit_wait_io+0x13/0x110
[  411.797996][   T33]  __wait_on_bit+0xac/0x300
[  411.798006][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  411.798024][   T33]  out_of_line_wait_on_bit+0x13b/0x190
[  411.798035][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  411.798045][   T33]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  411.798057][   T33]  ? __pfx_wake_bit_function+0x10/0x10
[  411.798076][   T33]  do_get_write_access+0x658/0x10c0
[  411.798097][   T33]  jbd2_journal_get_write_access+0x1d7/0x230
[  411.798111][   T33]  __ext4_journal_get_write_access+0xec/0x620
[  411.798126][   T33]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  411.798138][   T33]  ? trace_kmem_cache_alloc+0x29/0xe0
[  411.798148][   T33]  ? jbd2__journal_start+0x145/0x5d0
[  411.798164][   T33]  ext4_reserve_inode_write+0x294/0x360
[  411.798179][   T33]  __ext4_mark_inode_dirty+0x141/0x7b0
[  411.798199][   T33]  ext4_dirty_inode+0xd0/0x110
[  411.798211][   T33]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  411.798222][   T33]  __mark_inode_dirty+0x3a8/0x13b0
[  411.798238][   T33]  file_update_time_flags+0x399/0x440
[  411.798253][   T33]  ext4_page_mkwrite+0x21f/0x12c0
[  411.798270][   T33]  ? __pfx_filemap_fault+0x10/0x10
[  411.798288][   T33]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  411.798306][   T33]  do_page_mkwrite+0x147/0x310
[  411.798320][   T33]  do_pte_missing+0x757/0x34b0
[  411.798338][   T33]  ? handle_mm_fault+0xf1/0x3750
[  411.798350][   T33]  handle_mm_fault+0x1a53/0x3750
[  411.798365][   T33]  ? handle_mm_fault+0xf1/0x3750
[  411.798381][   T33]  ? __pfx_handle_mm_fault+0x10/0x10
[  411.798390][   T33]  ? lock_vma_under_rcu+0x45a/0x500
[  411.798407][   T33]  ? sched_clock_cpu+0x74/0x440
[  411.798423][   T33]  do_user_addr_fault+0xb35/0x1480
[  411.798439][   T33]  ? trace_page_fault_user+0x84/0x1e0
[  411.798450][   T33]  exc_page_fault+0x6a/0xc0
[  411.798461][   T33]  asm_exc_page_fault+0x26/0x30
[  411.798470][   T33] RIP: 0033:0x7fe9bc272f32
[  411.798479][   T33] RSP: 002b:00007ffe34d6e320 EFLAGS: 00010202
[  411.798487][   T33] RAX: 000000000000f008 RBX: 00007fe9bd155720 RCX: 0000000000000000
[  411.798494][   T33] RDX: 0000001b33a15000 RSI: 0000000000000008 RDI: 00007fe9bd155720
[  411.798500][   T33] RBP: 0000000000000193 R08: 00007fe9bc610000 R09: 00007fe9bc626038
[  411.798506][   T33] R10: 0000000000000007 R11: 0000000000000003 R12: ffffffff81bbd27e
[  411.798512][   T33] R13: 00007fe9bc626038 R14: 0000000000000102 R15: ffffffffffff1000
[  411.798520][   T33]  ? smp_call_function_many_cond+0x17e/0x1500
[  411.798540][   T33]  </TASK>
[  411.798544][   T33] INFO: task syz.2.1791:10696 blocked in I/O wait for more than 143 seconds.
[  411.798552][   T33]       Tainted: G             L      syzkaller #0
[  411.798751][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  411.798756][   T33] task:syz.2.1791      state:D stack:25608 pid:10696 tgid:10696 ppid:5614   task_flags:0x440040 flags:0x00080002
[  411.798784][   T33] Call Trace:
[  411.798788][   T33]  <TASK>
[  411.798794][   T33]  __schedule+0x17dd/0x5940
[  411.798816][   T33]  ? lock_acquire+0x115/0x350
[  411.798828][   T33]  ? __lock_acquire+0x747/0x2de0
[  411.798842][   T33]  ? __pfx___schedule+0x10/0x10
[  411.798862][   T33]  ? schedule+0x90/0x2b0
[  411.798878][   T33]  schedule+0x164/0x2b0
[  411.798893][   T33]  io_schedule+0x7f/0xd0
[  411.798904][   T33]  bit_wait_io+0x13/0x110
[  411.798915][   T33]  __wait_on_bit+0xac/0x300
[  411.798925][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  411.798937][   T33]  out_of_line_wait_on_bit+0x13b/0x190
[  411.798948][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  411.798958][   T33]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  411.798970][   T33]  ? __pfx_wake_bit_function+0x10/0x10
[  411.798988][   T33]  do_get_write_access+0x658/0x10c0
[  411.799014][   T33]  jbd2_journal_get_write_access+0x1d7/0x230
[  411.799028][   T33]  __ext4_journal_get_write_access+0xec/0x620
[  411.799043][   T33]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  411.799055][   T33]  ? trace_kmem_cache_alloc+0x29/0xe0
[  411.799065][   T33]  ? jbd2__journal_start+0x145/0x5d0
[  411.799081][   T33]  ext4_reserve_inode_write+0x294/0x360
[  411.799097][   T33]  __ext4_mark_inode_dirty+0x141/0x7b0
[  411.799117][   T33]  ext4_dirty_inode+0xd0/0x110
[  411.799128][   T33]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  411.799139][   T33]  __mark_inode_dirty+0x3a8/0x13b0
[  411.799155][   T33]  file_update_time_flags+0x399/0x440
[  411.799170][   T33]  ext4_page_mkwrite+0x21f/0x12c0
[  411.799187][   T33]  ? __pfx_filemap_fault+0x10/0x10
[  411.799203][   T33]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  411.799215][   T33]  ? lruvec_stat_mod_folio+0x28e/0x3e0
[  411.799231][   T33]  do_page_mkwrite+0x147/0x310
[  411.799245][   T33]  do_pte_missing+0x757/0x34b0
[  411.799260][   T33]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  411.799278][   T33]  handle_mm_fault+0x1a53/0x3750
[  411.799294][   T33]  ? handle_mm_fault+0xf1/0x3750
[  411.799310][   T33]  ? __pfx_handle_mm_fault+0x10/0x10
[  411.799319][   T33]  ? lock_vma_under_rcu+0x45a/0x500
[  411.799329][   T33]  ? __pfx_do_futex+0x10/0x10
[  411.799354][   T33]  do_user_addr_fault+0xb35/0x1480
[  411.799370][   T33]  ? trace_page_fault_user+0x84/0x1e0
[  411.799381][   T33]  exc_page_fault+0x6a/0xc0
[  411.799392][   T33]  asm_exc_page_fault+0x26/0x30
[  411.799401][   T33] RIP: 0033:0x7f8e028727a9
[  411.799409][   T33] RSP: 002b:00007ffc02f6eb80 EFLAGS: 00010202
[  411.799418][   T33] RAX: 0000001b33c24000 RBX: ffffffff82570ada RCX: 0000001b33c23ff8
[  411.799424][   T33] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007f8e03755700
[  411.799431][   T33] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f8e02c12000
[  411.799437][   T33] R10: 00007f8e03755700 R11: 0000000000000000 R12: 00007f8e02c26038
[  411.799443][   T33] R13: 0000000000000000 R14: ffffffff825703b0 R15: 00007f8e03755720
[  411.799450][   T33]  ? __x64_sys_mount+0x20/0xc0
[  411.799462][   T33]  ? __se_sys_fsmount+0xea/0xf00
[  411.799478][   T33]  </TASK>
[  411.799482][   T33] INFO: task syz.4.1795:10708 blocked in I/O wait for more than 143 seconds.
[  411.799490][   T33]       Tainted: G             L      syzkaller #0
[  411.799495][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  411.799499][   T33] task:syz.4.1795      state:D stack:27224 pid:10708 tgid:10708 ppid:5613   task_flags:0x440040 flags:0x00080002
[  411.799527][   T33] Call Trace:
[  411.799530][   T33]  <TASK>
[  411.799536][   T33]  __schedule+0x17dd/0x5940
[  411.799565][   T33]  ? __pfx___schedule+0x10/0x10
[  411.799585][   T33]  ? schedule+0x90/0x2b0
[  411.799601][   T33]  schedule+0x164/0x2b0
[  411.799622][   T33]  io_schedule+0x7f/0xd0
[  411.799633][   T33]  bit_wait_io+0x13/0x110
[  411.799644][   T33]  __wait_on_bit+0xac/0x300
[  411.799654][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  411.799666][   T33]  out_of_line_wait_on_bit+0x13b/0x190
[  411.799677][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  411.799686][   T33]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  411.799698][   T33]  ? __pfx_wake_bit_function+0x10/0x10
[  411.799717][   T33]  do_get_write_access+0x658/0x10c0
[  411.799738][   T33]  jbd2_journal_get_write_access+0x1d7/0x230
[  411.799752][   T33]  __ext4_journal_get_write_access+0xec/0x620
[  411.799767][   T33]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  411.799785][   T33]  ext4_reserve_inode_write+0x294/0x360
[  411.799801][   T33]  __ext4_mark_inode_dirty+0x141/0x7b0
[  411.799821][   T33]  ext4_dirty_inode+0xd0/0x110
[  411.799832][   T33]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  411.799844][   T33]  __mark_inode_dirty+0x3a8/0x13b0
[  411.799856][   T33]  ? mnt_get_write_access+0x216/0x280
[  411.799869][   T33]  ? ext4_file_mmap_prepare+0x277/0x450
[  411.799880][   T33]  touch_atime+0x568/0x670
[  411.799891][   T33]  ? ext4_file_mmap_prepare+0x277/0x450
[  411.799904][   T33]  ext4_file_mmap_prepare+0x277/0x450
[  411.799917][   T33]  mmap_region+0xe95/0x23a0
[  411.799936][   T33]  ? __page_table_check_zero+0x6c/0x430
[  411.799952][   T33]  ? __pfx_mmap_region+0x10/0x10
[  411.799966][   T33]  ? __lock_acquire+0x747/0x2de0
[  411.799986][   T33]  ? lock_acquire+0x115/0x350
[  411.800001][   T33]  ? __lock_acquire+0x747/0x2de0
[  411.800048][   T33]  ? mt_find+0x186/0x630
[  411.800061][   T33]  ? mt_find+0x5ff/0x630
[  411.800073][   T33]  ? mt_find+0x186/0x630
[  411.800084][   T33]  ? __pfx_mt_find+0x10/0x10
[  411.800098][   T33]  ? bpf_lsm_mmap_addr+0x9/0x50
[  411.800107][   T33]  ? security_mmap_addr+0x71/0x240
[  411.800122][   T33]  ? shmem_mapping+0xd/0x50
[  411.800133][   T33]  ? memfd_check_seals_mmap+0xc5/0x220
[  411.800145][   T33]  do_mmap+0xe0a/0x1300
[  411.800160][   T33]  ? __pfx_do_mmap+0x10/0x10
[  411.800175][   T33]  ? vm_mmap_pgoff+0x1dd/0x4e0
[  411.800188][   T33]  ? down_write_killable+0x179/0x230
[  411.800201][   T33]  ? __pfx_down_write_killable+0x10/0x10
[  411.800213][   T33]  ? apparmor_mmap_file+0x2e7/0x390
[  411.800229][   T33]  vm_mmap_pgoff+0x272/0x4e0
[  411.800242][   T33]  ? lock_acquire+0x115/0x350
[  411.800255][   T33]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  411.800269][   T33]  ? __fget_files+0x2a/0x420
[  411.800281][   T33]  ? __fget_files+0x3a2/0x420
[  411.800291][   T33]  ? __fget_files+0x2a/0x420
[  411.800303][   T33]  ksys_mmap_pgoff+0x4dc/0x760
[  411.800317][   T33]  do_syscall_64+0x166/0x520
[  411.800327][   T33]  ? trace_irq_disable+0x3b/0x140
[  411.800338][   T33]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.800349][   T33]  ? clear_bhb_loop+0x70/0xc0
[  411.800361][   T33]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.800371][   T33] RIP: 0033:0x7f9ac079dec2
[  411.800379][   T33] RSP: 002b:00007ffef60adb98 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  411.800389][   T33] RAX: ffffffffffffffda RBX: 0000001b33864000 RCX: 00007f9ac079dec2
[  411.800396][   T33] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b33864000
[  411.800402][   T33] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  411.800408][   T33] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000173
[  411.800415][   T33] R13: 00000000000927c0 R14: 0000000000040593 R15: 00007ffef60ade70
[  411.800430][   T33]  </TASK>
[  411.800435][   T33] INFO: task syz.3.1797:10709 blocked in I/O wait for more than 143 seconds.
[  411.800443][   T33]       Tainted: G             L      syzkaller #0
[  411.800448][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  411.800453][   T33] task:syz.3.1797      state:D stack:27224 pid:10709 tgid:10709 ppid:5619   task_flags:0x440040 flags:0x00080002
[  411.800480][   T33] Call Trace:
[  411.800483][   T33]  <TASK>
[  411.800489][   T33]  __schedule+0x17dd/0x5940
[  411.800516][   T33]  ? is_bpf_text_address+0x26/0x2b0
[  411.800531][   T33]  ? __pfx___schedule+0x10/0x10
[  411.800551][   T33]  ? schedule+0x90/0x2b0
[  411.800566][   T33]  schedule+0x164/0x2b0
[  411.800582][   T33]  io_schedule+0x7f/0xd0
[  411.800592][   T33]  bit_wait_io+0x13/0x110
[  411.800603][   T33]  __wait_on_bit+0xac/0x300
[  411.800613][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  411.800625][   T33]  out_of_line_wait_on_bit+0x13b/0x190
[  411.800636][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  411.800646][   T33]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  411.800658][   T33]  ? __pfx_wake_bit_function+0x10/0x10
[  411.800677][   T33]  do_get_write_access+0x658/0x10c0
[  411.800698][   T33]  jbd2_journal_get_write_access+0x1d7/0x230
[  411.800712][   T33]  __ext4_journal_get_write_access+0xec/0x620
[  411.800727][   T33]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  411.800745][   T33]  ext4_reserve_inode_write+0x294/0x360
[  411.800761][   T33]  __ext4_mark_inode_dirty+0x141/0x7b0
[  411.800787][   T33]  ext4_dirty_inode+0xd0/0x110
[  411.800799][   T33]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  411.800810][   T33]  __mark_inode_dirty+0x3a8/0x13b0
[  411.800822][   T33]  ? mnt_get_write_access+0x216/0x280
[  411.800835][   T33]  ? ext4_file_mmap_prepare+0x277/0x450
[  411.800846][   T33]  touch_atime+0x568/0x670
[  411.800857][   T33]  ? ext4_file_mmap_prepare+0x277/0x450
[  411.800871][   T33]  ext4_file_mmap_prepare+0x277/0x450
[  411.800884][   T33]  mmap_region+0xe95/0x23a0
[  411.800902][   T33]  ? __page_table_check_zero+0x6c/0x430
[  411.800918][   T33]  ? __pfx_mmap_region+0x10/0x10
[  411.800932][   T33]  ? __lock_acquire+0x747/0x2de0
[  411.800951][   T33]  ? lock_acquire+0x115/0x350
[  411.800966][   T33]  ? __lock_acquire+0x747/0x2de0
[  411.801012][   T33]  ? mt_find+0x186/0x630
[  411.801025][   T33]  ? mt_find+0x5ff/0x630
[  411.801037][   T33]  ? mt_find+0x186/0x630
[  411.801048][   T33]  ? __pfx_mt_find+0x10/0x10
[  411.801063][   T33]  ? bpf_lsm_mmap_addr+0x9/0x50
[  411.801072][   T33]  ? security_mmap_addr+0x71/0x240
[  411.801086][   T33]  ? shmem_mapping+0xd/0x50
[  411.801096][   T33]  ? memfd_check_seals_mmap+0xc5/0x220
[  411.801108][   T33]  do_mmap+0xe0a/0x1300
[  411.801122][   T33]  ? __pfx_do_mmap+0x10/0x10
[  411.801137][   T33]  ? vm_mmap_pgoff+0x1dd/0x4e0
[  411.801149][   T33]  ? down_write_killable+0x179/0x230
[  411.801162][   T33]  ? __pfx_down_write_killable+0x10/0x10
[  411.801174][   T33]  ? apparmor_mmap_file+0x2e7/0x390
[  411.801190][   T33]  vm_mmap_pgoff+0x272/0x4e0
[  411.801203][   T33]  ? lock_acquire+0x115/0x350
[  411.801216][   T33]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  411.801230][   T33]  ? __fget_files+0x2a/0x420
[  411.801242][   T33]  ? __fget_files+0x3a2/0x420
[  411.801252][   T33]  ? __fget_files+0x2a/0x420
[  411.801264][   T33]  ksys_mmap_pgoff+0x4dc/0x760
[  411.801277][   T33]  do_syscall_64+0x166/0x520
[  411.801287][   T33]  ? trace_irq_disable+0x3b/0x140
[  411.801297][   T33]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.801308][   T33]  ? clear_bhb_loop+0x70/0xc0
[  411.801320][   T33]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.801329][   T33] RIP: 0033:0x7f5ed199dec2
[  411.801337][   T33] RSP: 002b:00007ffc0eca1258 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  411.801347][   T33] RAX: ffffffffffffffda RBX: 0000001b33764000 RCX: 00007f5ed199dec2
[  411.801354][   T33] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b33764000
[  411.801360][   T33] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  411.801366][   T33] R10: 0000000000100001 R11: 0000000000000206 R12: 000000000000016a
[  411.801372][   T33] R13: 00000000000927c0 R14: 00000000000404e1 R15: 00007ffc0eca1530
[  411.801388][   T33]  </TASK>
[  411.801391][   T33] INFO: task syz.1.1796:10710 blocked in I/O wait for more than 143 seconds.
[  411.801400][   T33]       Tainted: G             L      syzkaller #0
[  411.801405][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  411.801409][   T33] task:syz.1.1796      state:D stack:27208 pid:10710 tgid:10710 ppid:5615   task_flags:0x440040 flags:0x00080002
[  411.801436][   T33] Call Trace:
[  411.801439][   T33]  <TASK>
[  411.801445][   T33]  __schedule+0x17dd/0x5940
[  411.801469][   T33]  ? __lock_acquire+0x1511/0x2de0
[  411.801484][   T33]  ? __pfx___schedule+0x10/0x10
[  411.801504][   T33]  ? schedule+0x90/0x2b0
[  411.801519][   T33]  schedule+0x164/0x2b0
[  411.801535][   T33]  io_schedule+0x7f/0xd0
[  411.801545][   T33]  bit_wait_io+0x13/0x110
[  411.801556][   T33]  __wait_on_bit+0xac/0x300
[  411.801566][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  411.801578][   T33]  out_of_line_wait_on_bit+0x13b/0x190
[  411.801589][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  411.801599][   T33]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  411.801611][   T33]  ? __pfx_wake_bit_function+0x10/0x10
[  411.801630][   T33]  do_get_write_access+0x658/0x10c0
[  411.801651][   T33]  jbd2_journal_get_write_access+0x1d7/0x230
[  411.801665][   T33]  __ext4_journal_get_write_access+0xec/0x620
[  411.801681][   T33]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  411.801698][   T33]  ext4_reserve_inode_write+0x294/0x360
[  411.801714][   T33]  __ext4_mark_inode_dirty+0x141/0x7b0
[  411.801734][   T33]  ext4_dirty_inode+0xd0/0x110
[  411.801746][   T33]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  411.801757][   T33]  __mark_inode_dirty+0x3a8/0x13b0
[  411.801770][   T33]  ? mnt_get_write_access+0x216/0x280
[  411.801783][   T33]  ? ext4_file_mmap_prepare+0x277/0x450
[  411.801794][   T33]  touch_atime+0x568/0x670
[  411.801805][   T33]  ? ext4_file_mmap_prepare+0x277/0x450
[  411.801818][   T33]  ext4_file_mmap_prepare+0x277/0x450
[  411.801832][   T33]  mmap_region+0xe95/0x23a0
[  411.801850][   T33]  ? __page_table_check_zero+0x6c/0x430
[  411.801870][   T33]  ? __pfx_mmap_region+0x10/0x10
[  411.801884][   T33]  ? __lock_acquire+0x747/0x2de0
[  411.801903][   T33]  ? lock_acquire+0x115/0x350
[  411.801918][   T33]  ? __lock_acquire+0x747/0x2de0
[  411.801960][   T33]  ? mt_find+0x186/0x630
[  411.801973][   T33]  ? mt_find+0x5ff/0x630
[  411.801985][   T33]  ? mt_find+0x186/0x630
[  411.801996][   T33]  ? __pfx_mt_find+0x10/0x10
[  411.802014][   T33]  ? bpf_lsm_mmap_addr+0x9/0x50
[  411.802023][   T33]  ? security_mmap_addr+0x71/0x240
[  411.802037][   T33]  ? shmem_mapping+0xd/0x50
[  411.802048][   T33]  ? memfd_check_seals_mmap+0xc5/0x220
[  411.802059][   T33]  do_mmap+0xe0a/0x1300
[  411.802073][   T33]  ? __pfx_do_mmap+0x10/0x10
[  411.802089][   T33]  ? vm_mmap_pgoff+0x1dd/0x4e0
[  411.802100][   T33]  ? down_write_killable+0x179/0x230
[  411.802114][   T33]  ? __pfx_down_write_killable+0x10/0x10
[  411.802126][   T33]  ? apparmor_mmap_file+0x2e7/0x390
[  411.802141][   T33]  vm_mmap_pgoff+0x272/0x4e0
[  411.802154][   T33]  ? lock_acquire+0x115/0x350
[  411.802167][   T33]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  411.802181][   T33]  ? __fget_files+0x2a/0x420
[  411.802194][   T33]  ? __fget_files+0x3a2/0x420
[  411.802203][   T33]  ? __fget_files+0x2a/0x420
[  411.802221][   T33]  ksys_mmap_pgoff+0x4dc/0x760
[  411.802234][   T33]  do_syscall_64+0x166/0x520
[  411.802244][   T33]  ? trace_irq_disable+0x3b/0x140
[  411.802254][   T33]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.802264][   T33]  ? clear_bhb_loop+0x70/0xc0
[  411.802276][   T33]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.802286][   T33] RIP: 0033:0x7f0c5499dec2
[  411.802294][   T33] RSP: 002b:00007ffdd9cc6068 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  411.802304][   T33] RAX: ffffffffffffffda RBX: 0000001b33564000 RCX: 00007f0c5499dec2
[  411.802311][   T33] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b33564000
[  411.802317][   T33] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  411.802323][   T33] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000188
[  411.802330][   T33] R13: 00000000000927c0 R14: 0000000000040625 R15: 00007ffdd9cc6340
[  411.802345][   T33]  </TASK>
[  411.802363][   T33] 
[  411.802363][   T33] Showing all locks held in the system:
[  411.802370][   T33] locks held by khungtaskd/33: 1, last CPU#0:
[  411.802378][   T33]  #0: ffffffff8ed5db60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  411.802414][   T33] locks held by kworker/u8:9/1157: 4, on CPU#0:
[  411.802421][   T33]  #0: ffff88801fef4940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  411.802448][   T33]  #1: ffffc9000501fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  411.802476][   T33]  #2: ffff8880343400e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  411.802502][   T33]  #3: ffff88803434ec98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0
[  411.802598][   T33] locks held by getty/5372: 2, on CPU#0:
[  411.802605][   T33]  #0: ffff8880321250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  411.802660][   T33]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  411.802706][   T33] locks held by syz-executor/5602: 3, on CPU#0:
[  411.802714][   T33]  #0: ffff88803433a1c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  411.802738][   T33]  #1: ffff888034340558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0
[  411.802762][   T33]  #2: ffff88803434c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  411.802814][   T33] locks held by syz.0.1789/10692: 3, on CPU#0:
[  411.802822][   T33]  #0: ffff88807b42a448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  411.802845][   T33]  #1: ffff888034340558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0
[  411.802874][   T33]  #2: ffff88803434c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  411.802897][   T33] locks held by syz.2.1791/10696: 3, on CPU#0:
[  411.802904][   T33]  #0: ffff888033ffc6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  411.802928][   T33]  #1: ffff888034340558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0
[  411.802952][   T33]  #2: ffff88803434c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  411.802976][   T33] locks held by syz.4.1795/10708: 3, on CPU#0:
[  411.802983][   T33]  #0: ffff88807f56dcf8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  411.803012][   T33]  #1: ffff888034340460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  411.803038][   T33]  #2: ffff88803434c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  411.803061][   T33] locks held by syz.3.1797/10709: 3, on CPU#0:
[  411.803068][   T33]  #0: ffff88807f569d38 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  411.803093][   T33]  #1: ffff888034340460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  411.803118][   T33]  #2: ffff88803434c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  411.803142][   T33] locks held by syz.1.1796/10710: 3, on CPU#0:
[  411.803149][   T33]  #0: ffff888028b85cf8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  411.803174][   T33]  #1: ffff888034340460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  411.803199][   T33]  #2: ffff88803434c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  411.803223][   T33] 
[  411.803226][   T33] =============================================
[  411.803226][   T33] 
[  411.803233][   T33] NMI backtrace for cpu 0
[  411.803247][   T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  411.803271][   T33] Tainted: [L]=SOFTLOCKUP
[  411.803277][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  411.803287][   T33] Call Trace:
[  411.803295][   T33]  <TASK>
[  411.803302][   T33]  dump_stack_lvl+0xe8/0x150
[  411.803331][   T33]  nmi_cpu_backtrace+0x274/0x2d0
[  411.803359][   T33]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  411.803392][   T33]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  411.803422][   T33]  sys_info+0x135/0x170
[  411.803446][   T33]  watchdog+0x1058/0x10d0
[  411.803477][   T33]  ? watchdog+0x209/0x10d0
[  411.803507][   T33]  kthread+0x38b/0x480
[  411.803530][   T33]  ? __pfx_watchdog+0x10/0x10
[  411.803550][   T33]  ? __pfx_kthread+0x10/0x10
[  411.803573][   T33]  ret_from_fork+0x514/0xb70
[  411.803594][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  411.803603][   T33]  ? __switch_to+0xc89/0x1420
[  411.803618][   T33]  ? __pfx_kthread+0x10/0x10
[  411.803629][   T33]  ret_from_fork_asm+0x1a/0x30
[  411.803653][   T33]  </TASK>
[  412.020453][   T33] Kernel panic - not syncing: hung_task: blocked tasks
[  414.783157][   T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  414.793807][   T33] Tainted: [L]=SOFTLOCKUP
[  414.798107][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  414.808134][   T33] Call Trace:
[  414.811389][   T33]  <TASK>
[  414.814300][   T33]  vpanic+0x56d/0xa70
[  414.818263][   T33]  ? __pfx___schedule+0x10/0x10
[  414.823094][   T33]  ? __pfx_vpanic+0x10/0x10
[  414.827578][   T33]  panic+0xc5/0xd0
[  414.831275][   T33]  ? __pfx_panic+0x10/0x10
[  414.835667][   T33]  ? preempt_schedule_common+0x7f/0xd0
[  414.841100][   T33]  ? preempt_schedule_thunk+0x16/0x40
[  414.846444][   T33]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  414.852609][   T33]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  414.858767][   T33]  watchdog+0x10cc/0x10d0
[  414.863086][   T33]  ? watchdog+0x209/0x10d0
[  414.867507][   T33]  kthread+0x38b/0x480
[  414.871554][   T33]  ? __pfx_watchdog+0x10/0x10
[  414.876205][   T33]  ? __pfx_kthread+0x10/0x10
[  414.880771][   T33]  ret_from_fork+0x514/0xb70
[  414.885340][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  414.890427][   T33]  ? __switch_to+0xc89/0x1420
[  414.895085][   T33]  ? __pfx_kthread+0x10/0x10
[  414.899652][   T33]  ret_from_fork_asm+0x1a/0x30
[  414.904404][   T33]  </TASK>
[  414.907473][   T33] Kernel Offset: disabled
[  414.911844][   T33] Rebooting in 86400 seconds..