last executing test programs:

3m7.005653307s ago: executing program 2 (id=81):
r0 = socket(0x15, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e)
getsockname(r0, 0x0, &(0x7f0000000100))

3m6.785846818s ago: executing program 2 (id=82):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x1d0, 0x1d0, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/244, 0x134}, {&(0x7f0000000440)=""/172, 0xb7}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x3}, 0x8}, {{0x0, 0x0, 0x0}, 0x7ffff6e7}, {{0x0, 0x0, 0x0}, 0x83}], 0x3fffdd0, 0x40000020, 0x0)

3m6.573814208s ago: executing program 2 (id=84):
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

3m6.32453396s ago: executing program 2 (id=88):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00')

3m5.271578089s ago: executing program 2 (id=94):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020)

3m4.318085754s ago: executing program 2 (id=99):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41)
link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3m3.838880207s ago: executing program 32 (id=99):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41)
link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2m43.794067659s ago: executing program 1 (id=218):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
lseek(r0, 0x27e61e85, 0x0)

2m42.890033512s ago: executing program 1 (id=225):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x8, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x1, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x8, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x8, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xbfff, 0x100, 0x196, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0xb4, 0x800001, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x10, 0xe8b, 0x5, 0x0, 0x48, 0x3f92, 0x1000, 0x45ae, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x1, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x3005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x3, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x80000000, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x98, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0x5, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x4, 0xf, 0x8002, 0xf, 0xf, 0x136, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0xfa000000}, 0xfe4f)

2m42.372581836s ago: executing program 1 (id=228):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

2m40.410563498s ago: executing program 1 (id=243):
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235222bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856a24cedd963c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75474939c664ff1849f8fbc403959f9c2de4b235261aba126be33a1762054cf2fad7dfc679c611c046f5764cfd3b84268cf21e9b8cd374866e2d55c4bfdd180a43e4fae7f5ddab3469cda8da12808566a285524ac700c24595dcd5c7784b30a4baafe80e10cecfe2393ecc927520408071c6901003dd15417429bfa90a54f501dd193865ebbb27e85c50605c45115595b04c410c2b2d6ef11e53872cba8091c88311d00c175bcf0a780265fe60228a640a746847d0138dc9f673fac8658d57ebaab4212bdcb1625a73bbda3c4a6e4282480077305b6afa3ebbcd525e588bf55760e556f1211a02cfe2e533ce915d86d62374332773744fcc8fdaf51812edd747c93b23bbe70d"], 0x1, 0x553a, &(0x7f0000006040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

2m38.293840058s ago: executing program 1 (id=260):
r0 = memfd_create(&(0x7f00000002c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x044\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00s.\xe3\xf3N\x80\xe8\xbb\x0f\\-\xa3v\x8b\xe9h\xaaO}\'F;y\x13AK\xf9\x10\x9e\xad\f\xfa\xc3\xb1\xe8IU\x8d\xfb\x82D\xb6 \x9e\x80L)\xc4\x0e\xc1J\xba9\xfeH\xbc\x17dH,E\x8d\x99\xc4\x83\xa3\xe1v\xf7\xae\xd1@c\xdb\xb5\xdbL\x19X\xca\xc3\x96v\r\x88Wpi\xc00\xa7\xbb[\x1c\x91\x8fp\x82O\x9au}\b\xfb\xfe\xc5\xd9{\f8\xa5SM*\xaf\xed\xe3\x8c\xdf\x9fH\x03\x98\xbby\xb8\x8aX&Q2\xe8!B\xb0U\x86\xfe\xe9-)\xea\x91R\xea\xa1\xb9\xfa\x82Kn\x1aQx!\x85\xec\xa2V\xd0>\x93\aX\a8\an.\x8f#\xb4\xda\xf8\x8e\xfb`\xb3\xb1\xfe\x9dg\xae\xda\xe1\xf3<u\xf0P\"\x0fo\xdd\x8b\x13W\xc2\xaa\xd5T\x06jS\x97_\xc0\x1f\xb5\xe2B\xb9\xd8r\x1ed\xb2#\xed`\xbdn\x14\x8d^\xff{\xdbh\x94\xdeA5\xf2\x9f\xf5\xc5T2S\xc6\xdd\x1f\n\x86\f\xef\xef\xde\x05$0\xae\xeb<\xceiT\xad%\x9e\x01T\xfa-l\x86\xc4\x8dK\xb1\x85\x85\xe5\xdb\xe4\xe6\xf2\xf7@\xf8\x18MW\xdc\x10T@\v+\x9b\a\x02L\x85\x14\t', 0x4)
r1 = dup(r0)
r2 = fanotify_init(0x200, 0x0)
fanotify_mark(r2, 0x1, 0x1b, r1, 0x0)

2m37.102058084s ago: executing program 1 (id=265):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r1, 0x4}, 0x8)

2m36.356488588s ago: executing program 33 (id=265):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r1, 0x4}, 0x8)

22.870361715s ago: executing program 4 (id=1231):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_TIMEOUT={0x8}]}, 0x4c}}, 0x20048004)

22.579140288s ago: executing program 4 (id=1234):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
write$char_usb(r1, &(0x7f00000003c0)='0', 0x1)

20.724758725s ago: executing program 4 (id=1248):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000000080)={&(0x7f0000000340)=[&(0x7f00000000c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x10000002}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})

18.853068274s ago: executing program 4 (id=1258):
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x191a461, &(0x7f0000000140)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]})

17.950292416s ago: executing program 4 (id=1262):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r1, 0x0, &(0x7f0000002500)="94", 0x1, 0x852})

16.722005084s ago: executing program 4 (id=1270):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x400c080)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9000, 0x3, &(0x7f000029d000/0x9000)=nil)

16.186083819s ago: executing program 34 (id=1270):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x400c080)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9000, 0x3, &(0x7f000029d000/0x9000)=nil)

5.654366324s ago: executing program 0 (id=1315):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

5.251286883s ago: executing program 0 (id=1318):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)={[{@i_version}, {@nolazytime}, {@errors_remount}, {@grpjquota}, {@acl}]}, 0xfe, 0x28f, &(0x7f0000000280)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000700), 0x24, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
removexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00')

4.643658252s ago: executing program 0 (id=1321):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

4.233891951s ago: executing program 0 (id=1323):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000057c0)=ANY=[@ANYBLOB='alloc_mode=default,active_logs=4,mode=fragment:block,noinline_xattr,background_gc=sync,background_gc=off,noinline_xattr,fastboot,fsync_mode=strict,discard_unit=section,noquota,disable_ext_identify,extent_cache,resgid=', @ANYRESOCT, @ANYRES8], 0x21, 0x554e, &(0x7f0000000240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)

3.533829744s ago: executing program 3 (id=1326):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000580)="d54b", 0x2}, {&(0x7f00000029c0)="d10e723295c88c95d1bc241dd614d9511c8d9a0ca1138dcb46539cf8e63479596f5060d230ed6b243448191f3d4180246f8d20680a0da2ba614fc3416ed510475537567e58cd9d5ff93c68d5d90817f5f42caa4b4cb551afcf649a899af2455a1cdee8b89d22be7ae842570d667df135541f218fcde7f4c57a8425b83537", 0x7e}], 0x2, 0x0, 0x0, 0x2000c881}, 0x48085)

3.273724156s ago: executing program 3 (id=1327):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000406a052a00000000000001090224000100000009090400000203000100092100000001221800090581030000000000fe75b75d52b772247cbe1c7532034a72a82c152b227145"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00221a000000584b48330a466a19b323795a1987028c492217b6e02a"], 0x0}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x55, 0x0, 0x0)

2.988902359s ago: executing program 5 (id=1329):
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./bus\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1de, &(0x7f0000000840)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x24)
chdir(&(0x7f00000003c0)='./bus\x00')
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f0000000000))

2.517059152s ago: executing program 5 (id=1330):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000001c0)="10031200e0ff020002004798aa96a13bb100a63336ca000000000c30", 0x1c, 0x20000400, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x5, 0x6, @remote}, 0x14)

2.151340229s ago: executing program 5 (id=1331):
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0xffff7ffc}, 0x1c)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd, 0x3}, &(0x7f0000000100)=0x10)

1.798704895s ago: executing program 0 (id=1332):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)={0x38, r1, 0x1, 0x70bd30, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "aae9"}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008084}, 0x0)

1.609861314s ago: executing program 5 (id=1333):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2842, 0x0)
read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
splice(r0, 0x0, r1, 0x0, 0x7c1f, 0x8)

1.242151661s ago: executing program 5 (id=1334):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0xd, 0xb, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r2, &(0x7f00000001c0), &(0x7f0000000a00)=""/75}, 0x20)

1.209401113s ago: executing program 3 (id=1335):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x7000, 0x9, 0x8000, 0x14a, 0x0, [{0x4, 0x93, 0x2, '\x00', 0x11}, {0x45, 0x0, 0x2, '\x00', 0x1}, {0xa, 0x80, 0x6, '\x00', 0x2}, {0xa, 0x2, 0x3, '\x00', 0x5}, {0x5, 0x4, 0x2, '\x00', 0xf7}, {0x1, 0x83, 0x4, '\x00', 0xfc}, {0x6, 0x7, 0x9, '\x00', 0x7f}, {0x80, 0x5, 0x3}, {0x80, 0x80, 0x0, '\x00', 0x6a}, {0x90, 0x3, 0x7, '\x00', 0x1}, {0x1, 0x4, 0x6, '\x00', 0x9}, {0x7, 0xa, 0x8, '\x00', 0x1}, {0xb0, 0x80, 0x4d, '\x00', 0x4}, {0x1f, 0xf7, 0x8, '\x00', 0x9}, {0x4, 0xce, 0x6, '\x00', 0x8}, {0x5, 0x3, 0x12, '\x00', 0x7a}, {0x1, 0xbc, 0x3c, '\x00', 0x1}, {0x40, 0xd0, 0x7, '\x00', 0x7}, {0x87, 0x3, 0x81, '\x00', 0xd}, {0x5, 0x8, 0x8, '\x00', 0x40}, {0x81, 0x4, 0x7, '\x00', 0x1}, {0x60, 0x2, 0x4, '\x00', 0x80}, {0x1, 0xe, 0x2, '\x00', 0x4}, {0x8, 0x4, 0x3, '\x00', 0xe5}]}})

868.377039ms ago: executing program 5 (id=1336):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4251}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

355.955313ms ago: executing program 3 (id=1337):
mkdir(&(0x7f0000000000)='dir0\x00', 0x80)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0)
read(r0, &(0x7f0000000180)=""/4, 0x1)

150.079643ms ago: executing program 3 (id=1338):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

23.990278ms ago: executing program 3 (id=1339):
r0 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b603b)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

0s ago: executing program 0 (id=1340):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

kernel console output (not intermixed with test programs):

ffc0000
[  157.161096][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'.
[  157.528393][ T6700] veth0_vlan: entered promiscuous mode
[  157.606926][ T6700] veth1_vlan: entered promiscuous mode
[  157.703856][ T6700] veth0_macvtap: entered promiscuous mode
[  157.724521][ T6700] veth1_macvtap: entered promiscuous mode
[  157.786079][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.809295][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.826005][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.868112][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.897797][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.922461][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.955071][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.000355][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.052508][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.068007][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.104871][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.141180][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.175213][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.222273][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.283978][ T5821] usb 5-1: USB disconnect, device number 4
[  158.294518][ T6700] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.329117][ T6700] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.352468][ T6700] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.371553][ T6700] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.585545][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.625129][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.703995][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.712225][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.113839][ T6935] WARNING! power/level is deprecated; use power/control instead
[  159.295319][ T6941] loop4: detected capacity change from 0 to 2048
[  159.360952][ T6941] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  159.386713][ T6941] UDF-fs: Scanning with blocksize 512 failed
[  159.441222][ T6941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.901118][ T6959] loop4: detected capacity change from 0 to 64
[  159.999810][ T6959] hfs: request for non-existent node 131072 in B*Tree
[  160.025554][ T6959] hfs: request for non-existent node 131072 in B*Tree
[  160.755021][ T6984] team_slave_0: entered promiscuous mode
[  160.761935][ T6984] team_slave_1: entered promiscuous mode
[  160.791522][ T6984] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  161.400194][ T6986] loop5: detected capacity change from 0 to 32768
[  161.472451][ T6986] 
[  161.472451][ T6986]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.472451][ T6986] 
[  161.547144][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  161.547166][   T28] audit: type=1800 audit(1789130385.255:33): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.349" name="file1" dev="loop5" ino=4 res=0 errno=0
[  161.549724][ T6986] 
[  161.549724][ T6986]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.549724][ T6986] 
[  161.626008][ T6986] 
[  161.626008][ T6986]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.626008][ T6986] 
[  161.663810][ T6986] 
[  161.663810][ T6986]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.663810][ T6986] 
[  161.708915][ T6986] 
[  161.708915][ T6986]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.708915][ T6986] 
[  161.722223][ T7014] program syz.3.356 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  161.770121][ T6986] 
[  161.770121][ T6986]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.770121][ T6986] 
[  161.872500][   T28] audit: type=1800 audit(1789130385.575:34): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.349" name="file1" dev="loop5" ino=4 res=0 errno=0
[  161.897611][  T114] JFS: metapage_get_blocks failed
[  161.943449][  T114] 
[  161.943449][  T114]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.943449][  T114] 
[  162.004869][ T7017] ERROR: (device loop5): diWrite: ixpxd invalid
[  162.004869][ T7017] 
[  162.026636][ T7017] ERROR: (device loop5): remounting filesystem as read-only
[  162.041165][ T7017] ERROR: (device loop5): txCommit: 
[  162.041165][ T7017] 
[  162.050736][ T7017] ERROR: (device loop5): diFree: invalid inoext
[  162.050736][ T7017] 
[  162.752269][ T7043] loop3: detected capacity change from 0 to 64
[  163.176417][ T7049] rtc_cmos 00:00: Alarms can be up to one day in the future
[  163.489308][ T7035] loop0: detected capacity change from 0 to 32768
[  163.537124][ T7035] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.364 (7035)
[  163.673214][ T7035] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  163.742697][ T7035] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  163.778810][ T7035] BTRFS info (device loop0): use zlib compression, level 3
[  163.798246][ T7035] BTRFS info (device loop0): using free space tree
[  164.057801][ T7041] loop5: detected capacity change from 0 to 32768
[  164.115495][ T7035] BTRFS info (device loop0): enabling ssd optimizations
[  164.145944][ T7035] BTRFS info (device loop0): auto enabling async discard
[  164.206168][ T7041] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  164.454282][ T7041] XFS (loop5): Ending clean mount
[  164.615686][   T28] audit: type=1800 audit(1789130388.325:35): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.361" name="file1" dev="loop5" ino=6150 res=0 errno=0
[  164.935224][ T5789] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  165.105051][ T6700] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  166.862522][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  167.052741][ T5838] usb 4-1: Using ep0 maxpacket: 8
[  167.078423][ T5838] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.109323][ T5838] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  167.128406][ T5838] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  167.178210][ T5838] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  167.202496][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.223725][ T7157] Bluetooth: MGMT ver 1.22
[  167.225093][ T5838] usb 4-1: Product: syz
[  167.242200][ T5838] usb 4-1: Manufacturer: syz
[  167.251129][ T5838] usb 4-1: SerialNumber: syz
[  167.292915][ T7151] kvm: kvm [7150]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x2e3
[  167.430655][ T7161] capability: warning: `syz.5.391' uses deprecated v2 capabilities in a way that may be insecure
[  167.618560][ T7166] program syz.4.392 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  167.928237][ T5838] usb 4-1: clock source 0 is not valid, cannot use
[  168.128144][ T5838] usb 4-1: 1:1: cannot get freq (v2/v3): err -71
[  168.161433][ T5838] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  168.304426][ T5838] usb 4-1: USB disconnect, device number 5
[  168.468118][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  168.914426][ T7199] netlink: 'syz.5.401': attribute type 39 has an invalid length.
[  169.112459][ T5843] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  169.315064][ T5843] usb 5-1: Using ep0 maxpacket: 8
[  169.364304][ T5843] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  169.396409][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.421747][ T5843] usb 5-1: Product: syz
[  169.440867][ T5843] usb 5-1: Manufacturer: syz
[  169.465609][ T5843] usb 5-1: SerialNumber: syz
[  169.499650][ T7209] netlink: 'syz.3.405': attribute type 10 has an invalid length.
[  169.509441][ T5843] usb 5-1: config 0 descriptor??
[  169.539441][ T5843] gspca_main: se401-2.14.0 probing 047d:5003
[  169.672290][ T7214] loop5: detected capacity change from 0 to 4096
[  169.846237][ T7214] ntfs: volume version 3.1.
[  169.932940][ T5843] gspca_se401: ExtraFeatures: 86
[  169.942555][ T5843] gspca_se401: Too many frame sizes
[  170.151144][ T5843] usb 5-1: USB disconnect, device number 5
[  170.662611][ T5838] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  170.882490][ T5838] usb 6-1: Using ep0 maxpacket: 16
[  170.903827][ T5838] usb 6-1: unable to get BOS descriptor or descriptor too short
[  170.927740][ T5838] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  170.951287][ T5838] usb 6-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  170.992902][ T5838] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  171.018800][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.068261][ T5838] usb 6-1: Product: syz
[  171.089839][ T5838] usb 6-1: Manufacturer: syz
[  171.101441][ T5838] usb 6-1: SerialNumber: syz
[  171.106114][ T7229] loop0: detected capacity change from 0 to 32768
[  171.144870][ T7243] loop4: detected capacity change from 0 to 4096
[  171.207060][ T7229] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  171.330398][ T7257] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  171.399043][ T5838] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  171.428558][ T7229] XFS (loop0): Ending clean mount
[  171.435880][ T5838] snd-usb-audio: probe of 6-1:5.0 failed with error -22
[  171.769645][ T5789] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  171.827640][ T7266] loop4: detected capacity change from 0 to 512
[  171.903050][ T7266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.948289][ T5838] usb 6-1: USB disconnect, device number 2
[  172.185843][ T7266] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:106: comm syz.4.416: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  172.395616][ T6125] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.411297][ T7313] loop5: detected capacity change from 0 to 40427
[  174.428647][ T7313] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  174.452528][ T7313] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  174.510447][ T7313] F2FS-fs (loop5): Found nat_bits in checkpoint
[  174.778540][ T7313] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  174.833544][ T7313] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  175.531517][ T7313] overlayfs: conflicting lowerdir path
[  175.710146][ T6700] syz-executor: attempt to access beyond end of device
[  175.710146][ T6700] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  175.815991][ T6700] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  175.842937][ T6700] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  176.152525][    T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  176.192737][ T5838] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  176.349902][   T28] audit: type=1400 audit(34156126.049:36): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7402 comm="syz.0.448" name="p" offset=58
[  176.372466][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  176.381601][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.420187][ T5838] usb 5-1: unable to get BOS descriptor or descriptor too short
[  176.438602][ T5838] usb 5-1: not running at top speed; connect to a high speed hub
[  176.452560][    T9] usb 4-1: Product: syz
[  176.456820][    T9] usb 4-1: Manufacturer: syz
[  176.461573][    T9] usb 4-1: SerialNumber: syz
[  176.473256][ T5838] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.494080][ T5838] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  176.504680][    T9] usb 4-1: config 0 descriptor??
[  176.539828][ T5838] usb 5-1: string descriptor 0 read error: -22
[  176.560646][ T5838] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  176.592952][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.650938][ T5838] usb 5-1: 0:2 : does not exist
[  176.661767][ T7407] loop5: detected capacity change from 0 to 1024
[  176.742634][    T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  177.355513][    T9] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  177.402994][    T9] usb 4-1: USB disconnect, device number 6
[  177.512969][ T5838] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  177.544815][ T5838] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  177.583102][ T5838] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  177.633695][ T5843] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  177.642104][ T5838] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  177.660304][ T5838] usb 5-1: USB disconnect, device number 6
[  177.867256][ T5843] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  177.884271][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.893109][ T5843] usb 6-1: Product: syz
[  177.897453][ T5843] usb 6-1: Manufacturer: syz
[  177.902227][ T5843] usb 6-1: SerialNumber: syz
[  177.922438][ T5843] usb 6-1: config 0 descriptor??
[  178.064427][ T7438] kAFS: bad VL server IP address
[  178.168992][ T5843] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  178.591492][ T5843] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  178.639476][ T7449] loop3: detected capacity change from 0 to 1024
[  178.643583][ T5843] usb 6-1: USB disconnect, device number 3
[  178.921065][ T7457] loop4: detected capacity change from 0 to 1024
[  179.652818][   T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  179.879531][   T27] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  179.905236][ T5838] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  179.906069][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.942097][   T27] usb 5-1: Product: syz
[  179.958479][   T27] usb 5-1: Manufacturer: syz
[  179.967758][   T27] usb 5-1: SerialNumber: syz
[  179.983850][   T27] usb 5-1: config 0 descriptor??
[  180.000690][   T27] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  180.122467][ T5838] usb 6-1: Using ep0 maxpacket: 32
[  180.147727][ T5838] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  180.162626][ T7492] loop0: detected capacity change from 0 to 512
[  180.167954][ T5838] usb 6-1: config 0 has no interface number 0
[  180.207207][ T5838] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  180.239535][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.275416][ T5838] usb 6-1: Product: syz
[  180.295855][ T5838] usb 6-1: Manufacturer: syz
[  180.321038][ T5838] usb 6-1: SerialNumber: syz
[  180.358154][ T5838] usb 6-1: config 0 descriptor??
[  180.376150][ T5838] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  180.612762][ T5838] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  180.654436][ T5838] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  180.844371][   T27] gspca_sunplus: reg_w_riv err -71
[  180.849799][   T27] sunplus: probe of 5-1:0.0 failed with error -71
[  180.888314][   T27] usb 5-1: USB disconnect, device number 7
[  181.135261][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  181.138207][   T27] usb 6-1: USB disconnect, device number 4
[  181.201380][   T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  181.257187][   T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  181.292899][   T27] quatech2 6-1:0.51: device disconnected
[  181.442140][ T7514] IPv6: NLM_F_CREATE should be specified when creating new route
[  181.459519][ T7514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  181.467704][ T7514] IPv6: NLM_F_CREATE should be set when creating new route
[  181.475228][ T7514] IPv6: NLM_F_CREATE should be set when creating new route
[  181.483031][ T7514] IPv6: NLM_F_CREATE should be set when creating new route
[  181.505765][ T7514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  181.516609][ T7514] Zero length message leads to an empty skb
[  182.110087][ T7535] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  182.382433][ T7544] loop3: detected capacity change from 0 to 1024
[  182.476429][ T7544] hfsplus: bad catalog entry type
[  182.515945][ T7546] program syz.4.498 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  182.624441][ T3433] hfsplus: b-tree write err: -5, ino 25
[  182.630330][ T3433] hfsplus: b-tree write err: -5, ino 4
[  182.667075][ T3433] hfsplus: b-tree write err: -5, ino 2
[  182.731324][ T7550] loop5: detected capacity change from 0 to 2048
[  182.778266][ T7550] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  182.799947][ T7550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.819713][ T7554] loop4: detected capacity change from 0 to 512
[  182.857762][ T7554] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  182.935456][ T7554] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #17: comm syz.4.502: iget: immutable or append flags not allowed on symlinks
[  183.078551][ T7554] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.502: couldn't read orphan inode 17 (err -117)
[  183.157491][ T7554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.384898][ T6125] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.692587][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  183.875197][    T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  183.900615][    T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  183.913935][    T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  183.929254][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.951413][ T7566] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  183.980998][    T9] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  184.304521][ T7575] loop4: detected capacity change from 0 to 40427
[  184.328101][ T7575] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  184.344570][ T7575] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  184.450670][ T7575] F2FS-fs (loop4): Found nat_bits in checkpoint
[  184.570799][   T27] usb 6-1: USB disconnect, device number 5
[  184.641783][ T7583] loop3: detected capacity change from 0 to 1024
[  184.700137][ T7575] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  184.711756][ T7575] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  185.116869][ T7590] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  185.376555][ T7597] loop5: detected capacity change from 0 to 1024
[  185.543224][ T7599] loop3: detected capacity change from 0 to 128
[  185.580932][ T7599] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  185.735523][ T7601] loop5: detected capacity change from 0 to 512
[  185.770738][ T7601] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  185.916289][ T7601] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  185.946277][ T7601] FAT-fs (loop5): Filesystem has been set read-only
[  185.976987][ T7601] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  186.947771][ T7633] loop5: detected capacity change from 0 to 256
[  187.030363][ T7633] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf9f813e7, utbl_chksum : 0xe619d30d)
[  187.253501][ T7640] loop3: detected capacity change from 0 to 7
[  187.284514][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  187.327461][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.337216][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  187.347826][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.357320][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  187.368229][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.377651][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  187.387652][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.397040][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  187.412446][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.421773][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  187.672798][ T7648] tipc: Started in network mode
[  187.677969][ T7648] tipc: Node identity ac14140f, cluster identity 4711
[  187.686269][ T7648] tipc: New replicast peer: 255.255.255.255
[  187.694569][ T7652] loop4: detected capacity change from 0 to 512
[  187.702183][ T7648] tipc: Enabled bearer <udp:syz2>, priority 10
[  187.773219][ T5821] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  187.992574][ T5821] usb 4-1: Using ep0 maxpacket: 8
[  188.015181][ T5821] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  188.031958][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.064644][ T5821] pvrusb2: Hardware description: Terratec Grabster AV400
[  188.075154][ T7659] loop4: detected capacity change from 0 to 1024
[  188.097304][ T5821] pvrusb2: **********
[  188.101392][ T5821] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  188.107912][ T7659] EXT4-fs: Ignoring removed orlov option
[  188.143546][ T5821] pvrusb2: Important functionality might not be entirely working.
[  188.151654][ T5821] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  188.168549][ T5821] pvrusb2: **********
[  188.174641][ T7659] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  188.212569][ T7659] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869)
[  188.262286][ T7659] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  188.306230][ T7659] EXT4-fs (loop4): invalid journal inode
[  188.312156][ T7659] EXT4-fs (loop4): can't get journal size
[  188.354115][ T2325] pvrusb2: Invalid write control endpoint
[  188.377207][ T7659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  188.391108][ T7664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'.
[  188.416491][ T7666] autofs4:pid:7666:autofs_fill_super: pipe file descriptor does not contain proper ops
[  188.601548][ T7644] pvrusb2: Invalid write control endpoint
[  188.623883][ T6125] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.649374][ T5843] usb 4-1: USB disconnect, device number 7
[  188.688127][ T2325] pvrusb2: Invalid write control endpoint
[  188.712366][ T2325] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  188.751005][ T2325] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  188.790223][ T2325] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  188.817149][ T5821] tipc: Node number set to 2886997007
[  188.824475][ T2325] pvrusb2: Device being rendered inoperable
[  188.858048][ T2325] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  188.893176][ T2325] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  188.935587][ T2325] pvrusb2: Attached sub-driver cx25840
[  188.950398][ T2325] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  188.980011][ T7677] loop5: detected capacity change from 0 to 512
[  188.986441][ T2325] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  189.824781][ T7703] loop3: detected capacity change from 0 to 256
[  189.831488][ T7701] loop5: detected capacity change from 0 to 1024
[  189.861657][ T7703] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  189.890620][ T7701] EXT4-fs: Ignoring removed nomblk_io_submit option
[  189.939501][ T7701] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  189.967688][   T28] audit: type=1800 audit(34156139.669:37): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.560" name="file1" dev="loop3" ino=1048616 res=0 errno=0
[  189.972943][ T7701] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  190.012660][ T7703] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264)
[  190.043348][ T7703] FAT-fs (loop3): Filesystem has been set read-only
[  190.056599][ T7706] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  190.084857][ T7701] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  190.118773][ T7701] System zones: 0-1, 3-36
[  190.245170][ T7701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.325597][ T7707] loop4: detected capacity change from 0 to 4096
[  190.427438][ T7707] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  190.503452][ T6700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.540490][ T7707] ntfs: volume version 3.1.
[  190.583551][ T7707] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  190.642462][ T7707] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  190.709982][ T7707] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  190.764366][ T7720] loop5: detected capacity change from 0 to 512
[  190.812536][ T7720] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  190.928356][ T7707] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro.  You might want to try to use the mount option nls=utf8.
[  190.956280][ T7720] EXT4-fs (loop5): 1 truncate cleaned up
[  191.022886][ T7720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.063139][ T7707] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  191.288115][ T7731] loop0: detected capacity change from 0 to 128
[  191.329087][ T6700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.664421][ T7740] loop3: detected capacity change from 0 to 128
[  191.909000][   T28] audit: type=1326 audit(34156141.609:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.4.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab799e159 code=0x7ffc0000
[  191.950296][   T28] audit: type=1326 audit(34156141.609:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.4.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab799e159 code=0x7ffc0000
[  192.016289][ T7750] loop3: detected capacity change from 0 to 512
[  192.072518][   T28] audit: type=1326 audit(34156141.649:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.4.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab799e159 code=0x7ffc0000
[  192.843325][ T7770] loop5: detected capacity change from 0 to 512
[  192.958138][ T7770] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.578: Invalid block bitmap block 0 in block_group 0
[  193.051105][ T7770] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  193.066528][ T7770] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.578: attempt to clear invalid blocks 983261 len 1
[  193.118978][ T7770] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.578: invalid indirect mapped block 2683928664 (level 0)
[  193.145361][ T7770] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.578: Invalid inode table block 0 in block_group 0
[  193.176048][ T7770] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  193.240160][ T7770] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  193.275203][ T7770] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.578: Invalid inode table block 0 in block_group 0
[  193.336579][ T7770] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  193.377972][ T7770] EXT4-fs error (device loop5): ext4_truncate:4302: inode #13: comm syz.5.578: mark_inode_dirty error
[  193.409381][ T7770] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  193.457826][ T7770] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.578: Invalid inode table block 0 in block_group 0
[  193.502868][ T7770] EXT4-fs (loop5): 1 truncate cleaned up
[  193.510092][ T7770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.683477][ T7770] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.578: Invalid inode table block 0 in block_group 0
[  193.766624][ T7770] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  193.859988][ T6700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.243084][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  195.249701][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  195.707085][ T7848] loop3: detected capacity change from 0 to 1024
[  196.618976][   T28] kauditd_printk_skb: 94 callbacks suppressed
[  196.618995][   T28] audit: type=1326 audit(34156146.319:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d3d9e159 code=0x7ffc0000
[  196.667499][   T28] audit: type=1326 audit(34156146.319:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d3d9e159 code=0x7ffc0000
[  196.741563][   T28] audit: type=1326 audit(34156146.369:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d3d9e159 code=0x7ffc0000
[  196.811546][   T28] audit: type=1326 audit(34156146.369:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d3d9e159 code=0x7ffc0000
[  196.903382][   T28] audit: type=1326 audit(34156146.369:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7ff0d3d9e159 code=0x7ffc0000
[  197.012400][   T28] audit: type=1326 audit(34156146.419:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d3d9e159 code=0x7ffc0000
[  197.075726][   T28] audit: type=1326 audit(34156146.419:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0d3d9dec2 code=0x7ffc0000
[  197.148563][   T28] audit: type=1326 audit(34156146.419:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff0d3d9df57 code=0x7ffc0000
[  197.224514][ T7886] loop5: detected capacity change from 0 to 512
[  197.232599][   T28] audit: type=1326 audit(34156146.419:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff0d3d5ae51 code=0x7ffc0000
[  197.291501][   T28] audit: type=1326 audit(34156146.419:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.606" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff0d3d9ef49 code=0x7ffc0000
[  197.349476][ T7886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.468921][ T7886] EXT4-fs (loop5): shut down requested (1)
[  197.665768][ T6700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.012481][ T5843] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  198.071750][ T7908] loop0: detected capacity change from 0 to 512
[  198.092229][ T7904] loop5: detected capacity change from 0 to 4096
[  198.100823][ T7908] EXT4-fs: inline encryption not supported
[  198.165688][ T7908] EXT4-fs (loop0): 1 truncate cleaned up
[  198.193670][ T7908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.212414][ T5843] usb 4-1: Using ep0 maxpacket: 8
[  198.224840][ T5843] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  198.244611][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.262283][ T5843] usb 4-1: Product: syz
[  198.271817][ T5843] usb 4-1: Manufacturer: syz
[  198.277412][ T5843] usb 4-1: SerialNumber: syz
[  198.293750][ T5843] usb 4-1: config 0 descriptor??
[  198.299391][ T7904] ntfs: volume version 3.1.
[  198.313836][ T5843] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  198.325187][ T5843] pctv452e: pctv452e_power_ctrl: 1
[  198.325187][ T5843] 
[  198.342499][ T5843] usb 4-1: selecting invalid altsetting 3
[  198.361279][ T7908] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.617: bg 0: block 465: padding at end of block bitmap is not set
[  198.388688][ T5843] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  198.388688][ T5843] 
[  198.427637][ T7908] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28
[  198.449632][ T5843] dvb-usb: bulk message failed: -22 (5/0)
[  198.492909][ T7908] EXT4-fs (loop0): This should not happen!! Data will be lost
[  198.492909][ T7908] 
[  198.527382][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  198.544419][ T5843] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  198.560127][ T5843] usb 4-1: media controller created
[  198.569021][ T5843] dvb-usb: bulk message failed: -22 (8/0)
[  198.573005][ T7908] EXT4-fs (loop0): Total free blocks count 0
[  198.601291][ T7908] EXT4-fs (loop0): Free/Dirty block details
[  198.615090][ T5843] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  198.642582][ T7908] EXT4-fs (loop0): free_blocks=0
[  198.647646][ T7908] EXT4-fs (loop0): dirty_blocks=8
[  198.648317][ T5843] dvb-usb: MAC address reading failed.
[  198.693584][ T7908] EXT4-fs (loop0): Block reservation details
[  198.700978][ T7908] EXT4-fs (loop0): i_reserved_data_blocks=8
[  198.805526][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  198.880505][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.621'.
[  198.890083][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.972566][ T7924] netlink: 56 bytes leftover after parsing attributes in process `syz.5.621'.
[  199.092765][ T5843] DVB: Unable to find symbol stb0899_attach()
[  199.133852][ T5843] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  199.440871][ T5843] rc_core: IR keymap rc-tt-1500 not found
[  199.450332][ T5843] Registered IR keymap rc-empty
[  199.473835][ T5843] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  199.534561][ T5843] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11
[  199.621329][ T5843] dvb-usb: schedule remote query interval to 100 msecs.
[  199.642685][ T5843] pctv452e: pctv452e_power_ctrl: 0
[  199.642685][ T5843] 
[  199.672634][ T5843] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  199.720945][ T5843] usb 4-1: USB disconnect, device number 8
[  199.767664][ T5819] dvb-usb: bulk message failed: -22 (4/0)
[  199.777933][ T5819] dvb-usb: error -22 while querying for an remote control event.
[  199.990821][ T5843] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  200.082842][ T5838] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  200.282766][ T5838] usb 6-1: Using ep0 maxpacket: 8
[  200.300626][ T5838] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  200.325703][ T5838] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  200.337676][ T5838] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  200.351643][ T5838] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  200.370858][ T5838] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  200.392772][ T5843] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  200.410497][ T5838] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  200.438449][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.614981][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0
[  200.626409][ T5843] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  200.648365][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.681006][ T5843] usb 4-1: config 0 descriptor??
[  200.732556][ T5838] usb 6-1: GET_CAPABILITIES returned 0
[  200.738216][ T5838] usbtmc 6-1:16.0: can't read capabilities
[  200.997872][   T27] usb 6-1: USB disconnect, device number 6
[  201.155672][ T5843] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x1
[  201.174984][ T5843] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x5
[  201.182232][ T5843] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x6
[  201.211882][ T5843] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0
[  201.242653][ T5843] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0
[  201.249832][ T5843] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0
[  201.280299][ T5843] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0
[  201.318794][ T5843] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0
[  201.337407][ T5843] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0
[  201.357074][ T5843] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0
[  201.578177][ T5843] hid-led: probe of 0003:0FC5:B080.0003 failed with error -71
[  201.592966][ T5843] usb 4-1: USB disconnect, device number 9
[  201.806966][ T7991] loop5: detected capacity change from 0 to 512
[  201.883614][ T7991] EXT4-fs error (device loop5): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  201.932271][ T7991] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #11: comm syz.5.639: corrupted inode contents
[  201.996930][ T7991] EXT4-fs error (device loop5): ext4_dirty_inode:6144: inode #11: comm syz.5.639: mark_inode_dirty error
[  202.047600][ T7991] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.639: invalid indirect mapped block 1 (level 1)
[  202.088457][ T7991] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #11: comm syz.5.639: corrupted inode contents
[  202.126884][ T7991] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  202.151464][ T7991] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #11: comm syz.5.639: corrupted inode contents
[  202.174187][ T7991] EXT4-fs error (device loop5): ext4_truncate:4302: inode #11: comm syz.5.639: mark_inode_dirty error
[  202.201891][ T7991] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  202.227944][ T7991] EXT4-fs (loop5): 1 truncate cleaned up
[  202.255811][ T7991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.500057][ T7991] CacheFiles: mkdir cache failed with error -105
[  202.519579][ T7991] CacheFiles: Failed to register: -105
[  202.658604][ T6700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.598934][ T8038] loop0: detected capacity change from 0 to 64
[  203.717791][ T8038] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  203.915972][    T9] kernel write not supported for file net/rpc/auth.unix.gid/channel (pid: 9 comm: kworker/0:1)
[  204.217613][ T8055] db_root: cannot open: û
[  204.875549][ T8080] loop3: detected capacity change from 0 to 512
[  204.948070][ T8080] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.675: corrupted in-inode xattr: invalid ea_ino
[  204.987801][ T8082] loop4: detected capacity change from 0 to 2048
[  205.009657][ T8080] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.675: couldn't read orphan inode 15 (err -117)
[  205.024574][ T8082] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  205.052994][ T8080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.198785][ T8080] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #13: comm syz.3.675: corrupted inode contents
[  205.266626][ T8080] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #13: comm syz.3.675: mark_inode_dirty error
[  205.299357][ T8080] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.675: invalid indirect mapped block 234881024 (level 0)
[  205.387687][ T8080] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #13: comm syz.3.675: corrupted inode contents
[  205.416636][ T8092] loop4: detected capacity change from 0 to 512
[  205.474001][ T8092] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.676: bg 0: block 5: invalid block bitmap
[  205.490940][ T8080] EXT4-fs error (device loop3): ext4_truncate:4302: inode #13: comm syz.3.675: mark_inode_dirty error
[  205.539397][ T8092] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  205.597510][ T8092] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.676: invalid indirect mapped block 3 (level 2)
[  205.618122][ T8080] EXT4-fs error (device loop3) in ext4_setattr:5683: Corrupt filesystem
[  205.637497][ T8092] EXT4-fs (loop4): 1 orphan inode deleted
[  205.682972][ T8092] EXT4-fs (loop4): 1 truncate cleaned up
[  205.694014][ T8092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.767958][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.018820][ T6125] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.451711][ T8156] loop5: detected capacity change from 0 to 256
[  207.509025][ T8156] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  208.189003][ T8145] loop0: detected capacity change from 0 to 32768
[  208.320323][ T8145] JBD2: Ignoring recovery information on journal
[  208.564627][ T8145] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  208.628117][ T8185] loop5: detected capacity change from 0 to 2159
[  208.742409][ T5843] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  208.944881][ T5843] usb 5-1: config 0 has no interfaces?
[  208.950733][ T5843] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01
[  208.972679][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.993783][ T5843] usb 5-1: config 0 descriptor??
[  209.088100][ T8145] syz.0.695 (8145) used greatest stack depth: 18840 bytes left
[  209.214827][ T5819] usb 5-1: USB disconnect, device number 8
[  209.249764][ T5789] ocfs2: Unmounting device (7,0) on (node local)
[  209.468214][ T8188] loop5: detected capacity change from 0 to 512
[  209.481646][ T8188] EXT4-fs: Ignoring removed oldalloc option
[  209.510294][ T8188] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  209.615087][ T8188] EXT4-fs (loop5): 1 truncate cleaned up
[  209.665105][ T8188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.879299][ T8188] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.714: invalid indirect mapped block 4294901760 (level 0)
[  209.901902][ T8188] EXT4-fs (loop5): Remounting filesystem read-only
[  210.066497][ T6700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.888604][ T5843] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  211.103039][ T5843] usb 6-1: Using ep0 maxpacket: 8
[  211.119028][ T5843] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  211.128552][ T5843] usb 6-1: config 179 has no interface number 0
[  211.167475][ T5843] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  211.198204][ T5843] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  211.237562][ T5843] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  211.283619][ T5843] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  211.308617][ T5843] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  211.331219][ T8232] ipvlan2: entered promiscuous mode
[  211.337925][ T5843] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  211.370176][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.380469][ T8232] team0: Device ipvlan2 failed to register rx_handler
[  211.410381][ T8215] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  211.616512][ T8234] netlink: 'syz.4.731': attribute type 5 has an invalid length.
[  211.647028][ T8234] netlink: 'syz.4.731': attribute type 1 has an invalid length.
[  211.968749][ T8221] loop0: detected capacity change from 0 to 32768
[  212.041402][ T2135] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input13
[  212.129392][ T8221] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  212.202186][ T8221] JBD2: Ignoring recovery information on journal
[  212.372736][ T8221] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  212.442810][ T5838] usb 6-1: USB disconnect, device number 7
[  212.442808][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  212.442908][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  212.513381][ T5838] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  212.917018][ T5789] ocfs2: Unmounting device (7,0) on (node local)
[  213.500317][ T8255] loop4: detected capacity change from 0 to 16384
[  213.591209][ T8267] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.603443][ T5838] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  214.654089][ T5838] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  214.781861][ T8284] netlink: 'syz.5.749': attribute type 4 has an invalid length.
[  215.374269][ T8277] loop4: detected capacity change from 0 to 32768
[  215.459052][ T8293] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  215.492114][   T60] rtrs_client L2018: <s+>: CM error (CM event: address error, err: -19)
[  215.527287][ T8293] rtrs_client L2618: <s+>: init_conns() failed: err=-113 path=<invalid address family>@ip:27.0.0.1 [:0]
[  215.903754][ T8300] gretap0: entered promiscuous mode
[  215.964114][ T5843] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  216.207220][ T5843] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  216.225056][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  216.242361][ T5843] usb 6-1: Product: syz
[  216.277513][ T8307] loop0: detected capacity change from 0 to 128
[  216.284180][ T5843] usb 6-1: SerialNumber: syz
[  216.305813][ T5843] usb 6-1: config 0 descriptor??
[  216.387490][ T8307] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  216.419005][ T8307] hpfs: filesystem error: improperly stopped
[  216.437620][ T8307] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  216.454192][ T8307] hpfs: You really don't want any checks? You are crazy...
[  216.472253][ T8307] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  216.490390][ T8307] hpfs: code page support is disabled
[  216.522118][ T8307] hpfs: hpfs_map_4sectors(): unaligned read
[  216.565651][ T8307] hpfs: hpfs_map_4sectors(): unaligned read
[  216.571648][ T8307] hpfs: filesystem error: unable to find root dir
[  216.580913][ T5843] hso 6-1:0.0: Failed to find BULK IN ep
[  216.872568][ T2135] usb 6-1: USB disconnect, device number 8
[  216.946002][ T8316] process 'syz.0.763' launched '/dev/fd/4' with NULL argv: empty string added
[  217.226728][ T8322] ipvlan2: entered promiscuous mode
[  217.245151][ T8322] team0: Device ipvlan2 failed to register rx_handler
[  217.567491][ T8328] loop3: detected capacity change from 0 to 512
[  217.664921][ T8328] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  217.702593][ T8328] System zones: 1-12
[  217.731084][ T8328] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.768: missing EA_INODE flag
[  217.771739][ T8328] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.768: error while reading EA inode 12 err=-117
[  217.787777][ T8328] EXT4-fs (loop3): 1 orphan inode deleted
[  217.796565][ T8328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.119399][ T5819] hid-generic 0005:0B57:05DF.0005: item fetching failed at offset 0/1
[  218.144066][ T5819] hid-generic: probe of 0005:0B57:05DF.0005 failed with error -22
[  218.252437][    T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  218.256059][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.464766][    T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.487328][    T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.535503][    T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00
[  218.582435][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  218.590535][    T8] usb 6-1: Product: syz
[  218.611155][    T8] usb 6-1: Manufacturer: syz
[  219.034097][ T8369] loop3: detected capacity change from 0 to 4096
[  219.063574][ T8369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.127889][    T8] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:046D:C299.0006/input/input14
[  219.268847][    T8] logitech 0003:046D:C299.0006: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.5-1/input0
[  219.301205][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.337234][    T8] logitech 0003:046D:C299.0006: Force feedback support for Logitech Gaming Wheels
[  219.685075][ T5819] usb 6-1: USB disconnect, device number 9
[  219.775444][ T8376] fido_id[8376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  221.178640][ T8403] loop4: detected capacity change from 0 to 512
[  221.221508][ T8403] FAT-fs (loop4): Directory bread(block 199916) failed
[  221.246324][ T8403] FAT-fs (loop4): Directory bread(block 199917) failed
[  221.273366][ T8403] FAT-fs (loop4): Directory bread(block 199918) failed
[  221.280372][ T8403] FAT-fs (loop4): Directory bread(block 199919) failed
[  221.313927][ T8403] FAT-fs (loop4): Directory bread(block 199920) failed
[  221.321002][ T8403] FAT-fs (loop4): Directory bread(block 199921) failed
[  221.353415][ T8403] FAT-fs (loop4): Directory bread(block 199922) failed
[  221.382891][ T8403] FAT-fs (loop4): Directory bread(block 199923) failed
[  221.521911][ T8403] FAT-fs (loop4): FAT read failed (blocknr 128)
[  221.598788][ T8399] loop5: detected capacity change from 0 to 32768
[  221.627048][ T8399] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.794 (8399)
[  221.686126][ T8399] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  221.708440][ T8399] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  221.734864][ T8399] BTRFS info (device loop5): use zlib compression, level 3
[  221.747556][ T8399] BTRFS info (device loop5): using free space tree
[  221.792480][   T51] Bluetooth: hci4: command 0x1003 tx timeout
[  221.793112][ T5783] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  222.017123][ T8415] loop4: detected capacity change from 0 to 4096
[  222.065276][ T8399] BTRFS info (device loop5): enabling ssd optimizations
[  222.072377][ T8399] BTRFS info (device loop5): auto enabling async discard
[  222.229845][ T8415] ntfs: volume version 3.1.
[  222.908170][ T8434] loop3: detected capacity change from 0 to 4096
[  222.914707][ T5783] Bluetooth: hci0: command 0x0406 tx timeout
[  222.914886][ T5783] Bluetooth: hci3: command 0x0406 tx timeout
[  222.963960][ T8434] __ntfs_warning: 72 callbacks suppressed
[  222.963979][ T8434] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  223.025079][ T6700] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  223.222523][ T8434] ntfs: volume version 3.1.
[  223.982107][ T8453] loop4: detected capacity change from 0 to 256
[  224.206291][ T8462] input: syz1 as /devices/virtual/input/input15
[  225.191885][ T8494] loop5: detected capacity change from 0 to 1024
[  225.527289][   T11] hfsplus: b-tree write err: -5, ino 4
[  225.558221][   T11] hfsplus: b-tree write err: -5, ino 2
[  225.572848][   T11] hfsplus: b-tree write err: -5, ino 20
[  225.795382][ T8508] program syz.0.836 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  226.932319][    C0] sched: RT throttling activated
[  227.149024][ T8511] loop4: detected capacity change from 0 to 131072
[  227.166641][ T8511] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(12321792)
[  227.176042][ T8511] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  227.204366][ T8511] F2FS-fs (loop4): Found nat_bits in checkpoint
[  227.315073][ T8511] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  227.322229][ T8511] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  227.678605][ T8520] loop5: detected capacity change from 0 to 32768
[  228.642186][ T8547] loop4: detected capacity change from 0 to 1024
[  228.877325][ T1095] hfsplus: b-tree write err: -5, ino 20
[  228.888864][ T1095] hfsplus: b-tree write err: -5, ino 4
[  228.894958][ T1095] hfsplus: b-tree write err: -5, ino 2
[  229.018138][ T8551] netlink: 52 bytes leftover after parsing attributes in process `syz.4.854'.
[  229.076195][ T8553] loop5: detected capacity change from 0 to 64
[  229.309524][   T28] audit: type=1400 audit(34156179.009:211): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8558 comm="syz.4.858" name="unknown" offset=28
[  229.402521][ T5843] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  229.631883][ T5843] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  229.662621][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.670737][ T5843] usb 4-1: Product: syz
[  229.683550][ T5843] usb 4-1: Manufacturer: syz
[  229.703509][ T5843] usb 4-1: SerialNumber: syz
[  229.711946][ T5843] usb 4-1: config 0 descriptor??
[  229.728831][ T5843] gspca_main: spca508-2.14.0 probing 041e:4018
[  229.770144][ T8568] loop5: detected capacity change from 0 to 512
[  229.815300][ T8568] FAT-fs (loop5): Directory bread(block 199916) failed
[  229.823485][ T8568] FAT-fs (loop5): Directory bread(block 199917) failed
[  229.830557][ T8568] FAT-fs (loop5): Directory bread(block 199918) failed
[  229.840401][ T8568] FAT-fs (loop5): Directory bread(block 199919) failed
[  229.847982][ T8568] FAT-fs (loop5): Directory bread(block 199920) failed
[  229.856588][ T8568] FAT-fs (loop5): Directory bread(block 199921) failed
[  229.869804][ T8568] FAT-fs (loop5): Directory bread(block 199922) failed
[  229.890908][ T8568] FAT-fs (loop5): Directory bread(block 199923) failed
[  229.954624][ T5843] gspca_spca508: reg_read err -32
[  229.966132][ T5843] gspca_spca508: reg_read err -32
[  229.986743][ T8568] FAT-fs (loop5): FAT read failed (blocknr 128)
[  230.175310][ T5843] gspca_spca508: reg_read err -71
[  230.190289][ T5843] gspca_spca508: reg_read err -71
[  230.198381][ T5843] gspca_spca508: reg write: error -71
[  230.208071][ T5843] spca508: probe of 4-1:0.0 failed with error -71
[  230.219840][ T5843] usb 4-1: USB disconnect, device number 10
[  230.313945][ T8565] loop4: detected capacity change from 0 to 40427
[  230.328624][ T8565] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff
[  230.337209][ T8565] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x30e4
[  230.411342][ T8565] F2FS-fs (loop4): invalid crc value
[  230.423114][ T8565] F2FS-fs (loop4): Found nat_bits in checkpoint
[  230.540973][ T8565] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  230.601944][ T8565] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  230.673968][ T8565] syz.4.862: attempt to access beyond end of device
[  230.673968][ T8565] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  230.711388][ T8565] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x181/0x910
[  231.287587][ T8587] loop0: detected capacity change from 0 to 4096
[  231.358701][ T8587] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  231.491135][ T8587] ntfs: volume version 3.1.
[  232.252128][ T8593] loop3: detected capacity change from 0 to 32768
[  232.306534][ T8593] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  232.331925][ T8593] JBD2: Ignoring recovery information on journal
[  232.492826][ T8593] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  232.611862][ T8591] loop5: detected capacity change from 0 to 40427
[  232.642262][ T8591] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  232.672828][ T8591] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  232.694741][ T8591] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x7ffff
[  232.761446][ T8591] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x6
[  232.826227][ T8591] F2FS-fs (loop5): invalid crc value
[  232.871393][ T8591] F2FS-fs (loop5): Found nat_bits in checkpoint
[  232.889496][ T8593] overlayfs: upper fs does not support tmpfile.
[  232.958066][ T1095] Bluetooth: hci4: Frame reassembly failed (-84)
[  232.989167][ T8609] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  233.022193][ T8593] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  233.082023][ T8593] overlayfs: failed to set xattr on upper
[  233.110331][ T8593] overlayfs: ...falling back to redirect_dir=nofollow.
[  233.139176][ T8593] overlayfs: ...falling back to index=off.
[  233.147965][ T8591] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  233.162421][ T8593] overlayfs: ...falling back to uuid=null.
[  233.169134][ T8591] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  233.180485][ T8593] overlayfs: upper fs missing required features.
[  233.202101][ T8616] netlink: 48 bytes leftover after parsing attributes in process `syz.0.880'.
[  233.218130][ T8616] bridge_slave_0: left allmulticast mode
[  233.251455][ T8616] bridge_slave_0: left promiscuous mode
[  233.274381][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.311664][ T8616] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  233.335186][ T8591] syz.5.873: attempt to access beyond end of device
[  233.335186][ T8591] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  233.404414][ T8591] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  233.420402][ T5780] ocfs2: Unmounting device (7,3) on (node local)
[  233.531180][ T8619] loop0: detected capacity change from 0 to 256
[  233.983521][ T8626] kAFS: Invalid Command on /proc/fs/afs/cells file
[  234.506429][ T8636] loop5: detected capacity change from 0 to 1024
[  234.540025][ T8636] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  234.874233][ T8642] loop5: detected capacity change from 0 to 736
[  234.992691][ T5787] Bluetooth: hci4: command 0x1003 tx timeout
[  235.000597][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  235.147748][ T8650] loop4: detected capacity change from 0 to 64
[  235.384202][ T8653] loop3: detected capacity change from 0 to 256
[  236.022895][ T2135] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  236.030660][ T8674] loop5: detected capacity change from 0 to 256
[  236.047641][ T8674] exfat: Deprecated parameter 'namecase'
[  236.055644][ T8674] exfat: Deprecated parameter 'namecase'
[  236.104603][ T8674] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  236.234400][ T2135] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.269927][ T2135] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  236.307060][ T2135] usb 4-1: config 0 interface 0 has no altsetting 0
[  236.342530][ T2135] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  236.361970][ T2135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.385747][ T2135] usb 4-1: config 0 descriptor??
[  236.657254][ T8686] loop0: detected capacity change from 0 to 736
[  236.848615][ T2135] hid-multitouch 0003:0EEF:72C4.0007: unbalanced collection at end of report description
[  236.893353][ T2135] hid-multitouch: probe of 0003:0EEF:72C4.0007 failed with error -22
[  237.134301][ T8696] scsi_dev_info_list_add_str: bad dev info string 'ÿ' '(null)' '(null)'
[  237.522803][    T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  237.641680][ T5838] usb 4-1: USB disconnect, device number 11
[  237.714932][    T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  237.729442][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.751336][    T9] usb 6-1: config 0 descriptor??
[  237.769549][    T9] cp210x 6-1:0.0: cp210x converter detected
[  238.172043][    T9] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  238.209046][    T9] usb 6-1: cp210x converter now attached to ttyUSB0
[  238.289910][ T8713] loop0: detected capacity change from 0 to 32768
[  238.372888][ T8713] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  238.415375][    T9] usb 6-1: USB disconnect, device number 10
[  238.428706][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  238.454796][    T9] cp210x 6-1:0.0: device disconnected
[  238.559134][ T8713] (syz.0.923,8713,0):ocfs2_double_lock:1190 ERROR: status = -2
[  238.592499][ T8713] (syz.0.923,8713,0):ocfs2_rename:1299 ERROR: status = -2
[  238.620908][ T8713] (syz.0.923,8713,0):ocfs2_rename:1690 ERROR: status = -2
[  238.801015][ T5789] ocfs2: Unmounting device (7,0) on (node local)
[  238.826789][ T8717] loop3: detected capacity change from 0 to 512
[  238.840896][ T8717] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  238.920600][ T8717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.007105][ T8717] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.925: iget: bad i_size value: 2533274857506816
[  239.277218][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.017423][ T8738] loop4: detected capacity change from 0 to 512
[  240.060663][ T8738] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  240.092693][ T8738] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  240.134593][ T8738] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.931: corrupted xattr entries
[  240.160873][ T8738] EXT4-fs (loop4): 1 orphan inode deleted
[  240.168726][ T8738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.244581][ T6125] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.449369][ T8747] Context (ID=0x10) not attached to queue pair (handle=0x2:0xf2)
[  240.502663][ T8750] loop5: detected capacity change from 0 to 1024
[  240.577467][ T8750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  240.874279][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'.
[  241.533014][ T3433] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm kworker/u4:9: lblock 0 mapped to illegal pblock 0 (length 6)
[  241.578396][ T3433] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  241.619387][ T3433] EXT4-fs (loop5): This should not happen!! Data will be lost
[  241.619387][ T3433] 
[  241.709341][   T11] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8)
[  241.759881][   T11] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  241.809245][   T11] EXT4-fs (loop5): This should not happen!! Data will be lost
[  241.809245][   T11] 
[  241.969474][ T8790] loop4: detected capacity change from 0 to 512
[  241.984770][ T8790] EXT4-fs: Ignoring removed nobh option
[  242.014289][ T8790] EXT4-fs (loop4): Test dummy encryption mode enabled
[  242.021251][ T8790] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  242.137787][ T8790] EXT4-fs (loop4): 1 truncate cleaned up
[  242.158350][ T8790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.221518][ T6700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  242.223976][ T5787] Bluetooth: hci1: link tx timeout
[  242.236805][ T5787] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  242.251678][ T5787] Bluetooth: hci1: link tx timeout
[  242.257104][ T5787] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  242.449754][ T5787] Bluetooth: hci1: link tx timeout
[  242.455216][ T5787] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  242.506080][ T5787] Bluetooth: hci1: link tx timeout
[  242.511334][ T5787] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  242.539777][ T6125] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.581051][ T8797] loop5: detected capacity change from 0 to 64
[  243.007011][ T5787] Bluetooth: hci1: link tx timeout
[  243.014535][ T5787] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  243.393196][ T5787] Bluetooth: hci2: command 0x0406 tx timeout
[  243.563086][ T5792] Bluetooth: hci1: link tx timeout
[  243.568405][ T5792] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  243.600215][ T8824] bonding: mM% is being created...
[  243.611947][ T8824] bonding: mM% creation failed
[  244.056516][ T5792] Bluetooth: hci1: link tx timeout
[  244.067340][ T5792] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  244.272901][ T5792] Bluetooth: hci1: command 0x0406 tx timeout
[  244.411526][ T8812] loop5: detected capacity change from 0 to 32768
[  244.469180][ T8812] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  244.489612][ T8812] JBD2: Ignoring recovery information on journal
[  244.551092][ T8812] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  244.853613][ T8812] overlayfs: upper fs does not support tmpfile.
[  244.884651][ T8812] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  244.942989][ T8812] overlayfs: failed to set xattr on upper
[  244.972645][ T8812] overlayfs: ...falling back to redirect_dir=nofollow.
[  244.979555][ T8812] overlayfs: ...falling back to index=off.
[  245.022208][ T8812] overlayfs: ...falling back to uuid=null.
[  245.039812][ T8812] overlayfs: upper fs missing required features.
[  245.323984][    C0] vkms_vblank_simulate: vblank timer overrun
[  245.391435][ T6700] ocfs2: Unmounting device (7,5) on (node local)
[  245.785845][ T8876] loop4: detected capacity change from 0 to 256
[  246.313490][ T8889] loop4: detected capacity change from 0 to 2048
[  246.349487][ T8889] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  246.400223][ T8892] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  246.815532][ T8883] loop5: detected capacity change from 0 to 32768
[  246.966313][ T8883] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  247.329358][ T8909] netlink: 'syz.3.988': attribute type 9 has an invalid length.
[  247.351208][ T8907] i2c i2c-0: delete_device: Can't find device in list
[  247.361732][ T8909] netlink: 371 bytes leftover after parsing attributes in process `syz.3.988'.
[  247.372861][ T6700] ocfs2: Unmounting device (7,5) on (node local)
[  247.923573][ T8898] loop4: detected capacity change from 0 to 40427
[  247.942705][ T8898] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  247.949142][ T8898] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  247.977047][ T8898] F2FS-fs (loop4): invalid crc value
[  248.072718][ T2135] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  248.175356][ T8898] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  248.182688][ T8898] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  248.293049][ T2135] usb 4-1: Using ep0 maxpacket: 16
[  248.303717][ T2135] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  248.311939][ T2135] usb 4-1: config 0 has no interface number 0
[  248.347715][ T2135] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  248.382378][ T2135] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  248.406503][ T2135] usb 4-1: config 0 interface 41 has no altsetting 0
[  248.422997][ T2135] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  248.433222][ T2135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.441565][ T2135] usb 4-1: Product: syz
[  248.452593][ T2135] usb 4-1: Manufacturer: syz
[  248.457303][ T2135] usb 4-1: SerialNumber: syz
[  248.464234][ T6125] syz-executor: attempt to access beyond end of device
[  248.464234][ T6125] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  248.487745][ T6125] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  248.503266][ T2135] usb 4-1: config 0 descriptor??
[  248.510853][ T8917] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  248.533216][ T8917] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  248.798927][ T8917] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  248.873602][ T8917] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  249.007085][ T8933] loop5: detected capacity change from 0 to 64
[  249.456330][   T28] audit: type=1326 audit(34156199.159:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.5.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3375f9e159 code=0x7ffc0000
[  249.592491][   T28] audit: type=1326 audit(34156199.159:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.5.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3375f9e159 code=0x7ffc0000
[  249.778805][   T28] audit: type=1326 audit(34156199.159:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.5.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3375f9e159 code=0x7ffc0000
[  249.847156][ T2135] sr9700 4-1:0.41 eth9: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, d6:eb:5f:61:13:de
[  249.963088][   T28] audit: type=1326 audit(34156199.159:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.5.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3375f9e159 code=0x7ffc0000
[  249.997890][ T2135] usb 4-1: USB disconnect, device number 12
[  250.071871][ T2135] sr9700 4-1:0.41 eth9: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet
[  250.182479][   T28] audit: type=1326 audit(34156199.229:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.5.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3375f9e159 code=0x7ffc0000
[  250.332639][   T28] audit: type=1326 audit(34156199.229:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.5.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3375f9dec2 code=0x7ffc0000
[  250.631025][   T28] audit: type=1326 audit(34156199.229:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.5.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3375f9df57 code=0x7ffc0000
[  250.791155][ T8941] loop4: detected capacity change from 0 to 131072
[  250.800010][ T8941] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  250.808288][ T8941] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  250.822649][ T8941] F2FS-fs (loop4): invalid crc value
[  250.830391][   T28] audit: type=1326 audit(34156199.229:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.5.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3375f5ae51 code=0x7ffc0000
[  250.913983][ T8941] F2FS-fs (loop4): Found nat_bits in checkpoint
[  250.987009][ T8941] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  250.987055][   T28] audit: type=1326 audit(34156199.229:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.5.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3375f9ef49 code=0x7ffc0000
[  250.994368][ T8941] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  251.105733][   T28] audit: type=1326 audit(34156199.239:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.5.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3375f5aebb code=0x7ffc0000
[  251.130131][ T2135] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  251.347438][ T2135] usb 4-1: Using ep0 maxpacket: 8
[  251.393152][ T2135] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  251.420696][ T2135] usb 4-1: config 179 has no interface number 0
[  251.437793][ T2135] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  251.480768][ T2135] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  251.520183][ T2135] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  251.575562][ T2135] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  251.616530][ T2135] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  251.644413][ T2135] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  251.681971][ T2135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.710173][ T8959] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  252.410064][ T2135] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input16
[  252.793243][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  252.801726][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  252.810229][ T2135] usb 4-1: USB disconnect, device number 13
[  252.823961][ T2135] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  252.988519][ T9002] loop0: detected capacity change from 0 to 1024
[  253.057927][ T9002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  253.942166][ T1095] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm kworker/u4:6: lblock 0 mapped to illegal pblock 0 (length 6)
[  254.041188][ T1095] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  254.092435][ T1095] EXT4-fs (loop0): This should not happen!! Data will be lost
[  254.092435][ T1095] 
[  254.110130][ T1095] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8)
[  254.160985][ T1095] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  254.222438][ T1095] EXT4-fs (loop0): This should not happen!! Data will be lost
[  254.222438][ T1095] 
[  254.543175][ T9050] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1032'.
[  254.676243][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  255.092672][ T9063] loop4: detected capacity change from 0 to 1024
[  255.223767][ T9063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  255.311983][ T9036] loop5: detected capacity change from 0 to 32768
[  255.343518][ T9036] XFS: noikeep mount option is deprecated.
[  255.395942][ T9036] XFS (loop5): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  255.410055][ T9073] loop0: detected capacity change from 0 to 256
[  255.612628][ T9036] XFS (loop5): Ending clean mount
[  255.936763][ T9033] dvmrp0: entered allmulticast mode
[  256.014942][ T9087] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  256.072459][ T9087] CPU: 1 PID: 9087 Comm: syz.0.1041 Not tainted syzkaller #0
[  256.080058][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  256.090302][ T9087] Call Trace:
[  256.093656][ T9087]  <TASK>
[  256.096659][ T9087]  dump_stack_lvl+0x18c/0x250
[  256.101459][ T9087]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  256.107730][ T9087]  ? show_regs_print_info+0x20/0x20
[  256.113022][ T9087]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  256.119283][ T9087]  sysfs_create_dir_ns+0x26e/0x2a0
[  256.124465][ T9087]  ? __lock_acquire+0x7d80/0x7d80
[  256.129567][ T9087]  ? sysfs_warn_dup+0xa0/0xa0
[  256.134291][ T9087]  ? rcu_is_watching+0x15/0xb0
[  256.139114][ T9087]  ? do_raw_spin_unlock+0x121/0x230
[  256.144378][ T9087]  kobject_add_internal+0x617/0xc90
[  256.149643][ T9087]  kobject_add+0x164/0x240
[  256.154211][ T9087]  ? kobject_init+0x1d0/0x1d0
[  256.158959][ T9087]  ? get_device_parent+0x366/0x390
[  256.164126][ T9087]  device_add+0x3fa/0xc40
[  256.168511][ T9087]  tty_register_device_attr+0x425/0x950
[  256.174124][ T9087]  ? tty_register_device+0x30/0x30
[  256.179293][ T9087]  ? tty_port_init+0x132/0x1a0
[  256.184188][ T9087]  ? gsm_dlci_alloc+0x32a/0x630
[  256.189088][ T9087]  ? __might_fault+0xaa/0x120
[  256.193809][ T9087]  gsm_activate_mux+0x110/0x2a0
[  256.198713][ T9087]  gsmld_ioctl+0x12ca/0x1900
[  256.203362][ T9087]  ? gsmld_write+0x120/0x120
[  256.208014][ T9087]  ? __init_ldsem+0x150/0x150
[  256.212751][ T9087]  ? __fget_files+0x28/0x460
[  256.217427][ T9087]  ? gsmld_write+0x120/0x120
[  256.222060][ T9087]  tty_ioctl+0x9b5/0xdc0
[  256.226344][ T9087]  ? tty_get_icount+0xb0/0xb0
[  256.231066][ T9087]  __se_sys_ioctl+0xfd/0x170
[  256.235878][ T9087]  do_syscall_64+0x55/0xb0
[  256.240340][ T9087]  ? clear_bhb_loop+0x40/0x90
[  256.245064][ T9087]  ? clear_bhb_loop+0x40/0x90
[  256.249824][ T9087]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  256.255866][ T9087] RIP: 0033:0x7f277899e159
[  256.260339][ T9087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.280004][ T9087] RSP: 002b:00007f2779908028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  256.288724][ T9087] RAX: ffffffffffffffda RBX: 00007f2778c26090 RCX: 00007f277899e159
[  256.296742][ T9087] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003
[  256.304861][ T9087] RBP: 00007f2778a3503b R08: 0000000000000000 R09: 0000000000000000
[  256.312886][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  256.320943][ T9087] R13: 00007f2778c26128 R14: 00007f2778c26090 R15: 00007fffef38ef88
[  256.328995][ T9087]  </TASK>
[  256.399520][ T9087] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  256.432971][ T6700] XFS (loop5): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  256.501502][   T12] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 6)
[  256.527856][   T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  256.546040][   T12] EXT4-fs (loop4): This should not happen!! Data will be lost
[  256.546040][   T12] 
[  256.645447][   T12] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8)
[  256.671249][   T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  256.713023][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  256.728132][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  256.758870][   T12] EXT4-fs (loop4): This should not happen!! Data will be lost
[  256.758870][   T12] 
[  257.271112][ T6125] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  257.600165][ T1095] dvmrp0 (unregistering): left allmulticast mode
[  257.700402][ T9105] program syz.5.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  258.323655][ T9117] loop4: detected capacity change from 0 to 4096
[  258.458905][ T9117] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  259.091355][ T9137] loop3: detected capacity change from 0 to 1024
[  259.207653][ T9137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  259.286108][   T28] kauditd_printk_skb: 15 callbacks suppressed
[  259.286128][   T28] audit: type=1400 audit(34156208.989:237): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="//o" pid=9143 comm="syz.0.1057" name="//o" offset=81
[  260.034826][ T9163] loop0: detected capacity change from 0 to 4096
[  260.070008][ T9163] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  260.311408][   T12] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 6)
[  260.325599][ T9163] ntfs: volume version 3.1.
[  260.356859][   T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  260.405288][   T12] EXT4-fs (loop3): This should not happen!! Data will be lost
[  260.405288][   T12] 
[  260.454003][   T12] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8)
[  260.538451][   T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  260.579765][   T12] EXT4-fs (loop3): This should not happen!! Data will be lost
[  260.579765][   T12] 
[  260.753022][ T9177] overlay: filesystem on ./file0 not supported as upperdir
[  260.779516][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  260.977073][ T9183] loop3: detected capacity change from 0 to 2048
[  261.004148][ T9183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.396430][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.620882][ T9203] loop4: detected capacity change from 0 to 256
[  262.117387][ T9199] loop5: detected capacity change from 0 to 32768
[  262.183076][ T9199] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  262.316038][ T9199] XFS (loop5): Ending clean mount
[  262.651149][ T6700] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  262.920922][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'.
[  263.472442][ T5819] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  263.713471][ T5819] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  263.742415][ T5819] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  263.762939][ T5819] usb 6-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  263.785926][ T5819] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  263.795810][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.804691][ T5819] usb 6-1: Product: syz
[  263.809032][ T5819] usb 6-1: Manufacturer: syz
[  263.814351][ T5819] usb 6-1: SerialNumber: syz
[  263.855961][ T9241] block2mtd: too many arguments
[  264.227568][ T9249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1096'.
[  264.273070][    C1] usb 6-1: received EP1 urb->status = -2
[  264.279111][ T5819] usb 6-1: unable to init card! (ret=-110)
[  264.286892][ T5819] snd-usb-caiaq: probe of 6-1:1.0 failed with error -110
[  264.328649][ T9251] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.1097'.
[  264.441666][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'.
[  264.470680][ T9255] loop8: detected capacity change from 0 to 7
[  264.500094][ T5819] usb 6-1: USB disconnect, device number 11
[  264.509644][ T9255] Dev loop8: unable to read RDB block 7
[  264.530238][ T9255]  loop8: unable to read partition table
[  264.549568][ T9255] loop8: partition table beyond EOD, truncated
[  264.577151][ T9255] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  264.796325][ T9261] loop3: detected capacity change from 0 to 128
[  264.809839][ T9261] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  264.855005][ T9261] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  265.010144][   T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  265.094780][ T9267] loop4: detected capacity change from 0 to 256
[  265.463612][ T9275] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1109'.
[  265.555393][ T9281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1109'.
[  265.620472][ T9281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1109'.
[  265.648054][ T9275] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1109'.
[  265.977337][ T9275] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1109'.
[  265.997265][ T9281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1109'.
[  266.219473][ T9301] loop5: detected capacity change from 0 to 512
[  266.267775][ T9301] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.1117: iget: bad i_size value: 38620345925642
[  266.309019][ T9308] loop4: detected capacity change from 0 to 2048
[  266.317020][ T9301] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1117: couldn't read orphan inode 15 (err -117)
[  266.366581][ T9308] NILFS (loop4): invalid segment: Magic number mismatch
[  266.398329][ T9308] NILFS (loop4): trying rollback from an earlier position
[  266.407943][ T9301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.436784][ T9308] NILFS (loop4): recovery complete
[  266.452788][ T9310] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  266.675910][   T60] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm kworker/u4:4: bg 0: block 5: invalid block bitmap
[  266.716515][   T60] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28
[  266.732154][   T60] EXT4-fs (loop5): This should not happen!! Data will be lost
[  266.732154][   T60] 
[  266.742492][   T60] EXT4-fs (loop5): Total free blocks count 0
[  266.748553][   T60] EXT4-fs (loop5): Free/Dirty block details
[  266.780872][   T60] EXT4-fs (loop5): free_blocks=0
[  266.792705][   T60] EXT4-fs (loop5): dirty_blocks=1
[  266.802395][   T60] EXT4-fs (loop5): Block reservation details
[  266.812955][   T60] EXT4-fs (loop5): i_reserved_data_blocks=1
[  266.835725][ T6700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.351455][ T9329] loop5: detected capacity change from 0 to 7
[  267.369993][ T9329] Dev loop5: unable to read RDB block 7
[  267.379973][ T9329]  loop5: AHDI p1
[  267.392959][ T9329] loop5: partition table partially beyond EOD, truncated
[  267.454192][ T9331] loop5: detected capacity change from 0 to 2048
[  267.478412][ T9331] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  267.496656][ T9331] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  267.535049][ T9331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  267.898441][ T9341] loop5: detected capacity change from 0 to 1024
[  267.973472][ T9341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.121355][ T9350] program syz.4.1138 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  268.235438][ T9341] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1133: missing EA_INODE flag
[  268.322706][ T9341] EXT4-fs (loop5): Remounting filesystem read-only
[  268.388172][ T9357] loop3: detected capacity change from 0 to 1024
[  268.421530][ T9357] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  268.464403][ T6700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.556065][ T9357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.672626][   T28] audit: type=1400 audit(34156218.369:238): apparmor="STATUS" operation="profile_load" profile="unconfined" name=223A6F pid=9360 comm="syz.4.1142"
[  268.879048][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.317448][   T51] Bluetooth: hci0: unexpected event for opcode 0x200c
[  269.545990][ T9394] loop5: detected capacity change from 0 to 128
[  269.557920][ T9394] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  269.607691][ T9394] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  269.857291][ T1087] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  269.983368][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'.
[  270.017697][ T9406] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1160'.
[  270.037040][ T9408] loop5: detected capacity change from 0 to 512
[  270.089121][ T9408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.245830][ T6700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.709361][ T9429] loop0: detected capacity change from 0 to 16
[  270.754794][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.764473][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.781361][ T9429] erofs: (device loop0): mounted with root inode @ nid 36.
[  270.876790][ T9429] erofs: (device loop0): erofs_find_target_block: corrupted dir block 0 @ nid 36
[  270.907075][ T9429] erofs: (device loop0): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000
[  271.213169][ T9440] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  271.221980][ T9440] CPU: 0 PID: 9440 Comm: syz.5.1173 Not tainted syzkaller #0
[  271.229596][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  271.239725][ T9440] Call Trace:
[  271.243050][ T9440]  <TASK>
[  271.246074][ T9440]  dump_stack_lvl+0x18c/0x250
[  271.250933][ T9440]  ? show_regs_print_info+0x20/0x20
[  271.256418][ T9440]  ? load_image+0x420/0x420
[  271.261022][ T9440]  sysfs_create_dir_ns+0x26e/0x2a0
[  271.266213][ T9440]  ? __lock_acquire+0x7d80/0x7d80
[  271.271340][ T9440]  ? sysfs_warn_dup+0xa0/0xa0
[  271.276121][ T9440]  ? rcu_is_watching+0x15/0xb0
[  271.280987][ T9440]  ? do_raw_spin_unlock+0x121/0x230
[  271.286307][ T9440]  kobject_add_internal+0x617/0xc90
[  271.291626][ T9440]  kobject_add+0x164/0x240
[  271.296240][ T9440]  ? kobject_init+0x1d0/0x1d0
[  271.301035][ T9440]  ? get_device_parent+0x366/0x390
[  271.306449][ T9440]  device_add+0x3fa/0xc40
[  271.310955][ T9440]  tty_register_device_attr+0x425/0x950
[  271.316720][ T9440]  ? tty_register_device+0x30/0x30
[  271.322065][ T9440]  ? tty_port_init+0x132/0x1a0
[  271.327007][ T9440]  ? gsm_dlci_alloc+0x32a/0x630
[  271.332038][ T9440]  ? __might_fault+0xaa/0x120
[  271.336793][ T9440]  gsm_activate_mux+0x110/0x2a0
[  271.341737][ T9440]  gsmld_ioctl+0x12ca/0x1900
[  271.346418][ T9440]  ? gsmld_write+0x120/0x120
[  271.351151][ T9440]  ? __init_ldsem+0x150/0x150
[  271.355996][ T9440]  ? __fget_files+0x28/0x460
[  271.360682][ T9440]  ? gsmld_write+0x120/0x120
[  271.365433][ T9440]  tty_ioctl+0x9b5/0xdc0
[  271.369933][ T9440]  ? tty_get_icount+0xb0/0xb0
[  271.374783][ T9440]  __se_sys_ioctl+0xfd/0x170
[  271.379642][ T9440]  do_syscall_64+0x55/0xb0
[  271.384140][ T9440]  ? clear_bhb_loop+0x40/0x90
[  271.388988][ T9440]  ? clear_bhb_loop+0x40/0x90
[  271.393749][ T9440]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  271.399711][ T9440] RIP: 0033:0x7f3375f9e159
[  271.404192][ T9440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  271.424012][ T9440] RSP: 002b:00007f3376e25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  271.432610][ T9440] RAX: ffffffffffffffda RBX: 00007f3376226090 RCX: 00007f3375f9e159
[  271.440654][ T9440] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003
[  271.448705][ T9440] RBP: 00007f337603503b R08: 0000000000000000 R09: 0000000000000000
[  271.456771][ T9440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.464833][ T9440] R13: 00007f3376226128 R14: 00007f3376226090 R15: 00007ffc4548da98
[  271.472906][ T9440]  </TASK>
[  271.534812][ T9440] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  271.874371][ T9447] kAFS: bad VL server IP address
[  272.549965][ T9435] loop4: detected capacity change from 0 to 32768
[  272.615361][ T9451] loop3: detected capacity change from 0 to 2048
[  272.671751][ T9451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  272.718081][ T9444] loop0: detected capacity change from 0 to 32768
[  273.223521][   T28] audit: type=1326 audit(34156222.929:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9458 comm="syz.5.1183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3375f9e159 code=0x0
[  274.106703][ T9478] loop5: detected capacity change from 0 to 128
[  274.119457][ T9478] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  274.155232][ T9478] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  274.239125][   T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  274.507769][   T28] audit: type=1400 audit(34156224.209:240): apparmor="STATUS" operation="profile_replace" profile="unconfined" name=223A6F pid=9483 comm="syz.3.1194"
[  274.593043][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.602368][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.612856][ T9488] loop5: detected capacity change from 0 to 512
[  274.620616][ T9488] EXT4-fs: Ignoring removed orlov option
[  274.628369][ T9488] EXT4-fs: Ignoring removed mblk_io_submit option
[  274.715091][ T9488] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.1196: corrupted in-inode xattr: e_value size too large
[  274.755232][ T9488] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1196: couldn't read orphan inode 15 (err -117)
[  274.786701][ T9488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.820288][ T9494] loop3: detected capacity change from 0 to 2048
[  274.890167][ T9494] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  274.922829][ T9494] UDF-fs: Scanning with blocksize 512 failed
[  274.939757][ T6700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.052343][ T9494] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  275.238790][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.832467][ T5838] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  276.014784][ T5838] usb 6-1: Using ep0 maxpacket: 16
[  276.036586][ T5838] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.071726][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  276.098694][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  276.142470][ T5838] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  276.192553][ T5838] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  276.219552][ T5838] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  276.230033][ T5838] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  276.238637][ T5838] usb 6-1: Manufacturer: syz
[  276.255140][ T5838] usb 6-1: config 0 descriptor??
[  276.363771][ T9514] loop3: detected capacity change from 0 to 32768
[  276.619123][ T5838] rc_core: IR keymap rc-hauppauge not found
[  276.633668][ T5838] Registered IR keymap rc-empty
[  276.651843][ T5838] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  276.712458][ T5838] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  276.754504][ T5838] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  276.774374][ T5838] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input17
[  276.802780][ T5838] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  276.845906][ T5838] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  276.874015][ T9532] loop4: detected capacity change from 0 to 512
[  276.884990][ T5838] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  276.930161][ T9532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.943345][ T5838] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  276.972699][ T5838] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  277.012789][ T5838] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  277.049040][ T5838] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  277.092675][ T5838] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  277.122507][ T5838] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  277.155205][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.168965][ T5838] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  277.203330][ T6125] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.218695][ T5838] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  277.301806][ T5838] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  277.353619][ T5838] usb 6-1: USB disconnect, device number 12
[  277.589570][ T9540] program syz.4.1215 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  278.327357][ T9563] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1228'.
[  278.444467][ T9565] loop0: detected capacity change from 0 to 256
[  278.483147][ T9565] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  278.554944][ T9565] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  279.082698][ T5819] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  279.275360][ T5819] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  279.292580][ T5819] usb 5-1: config 0 has no interface number 0
[  279.298807][ T5819] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  279.366670][ T5819] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  279.408237][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.416747][ T5819] usb 5-1: Product: syz
[  279.420997][ T5819] usb 5-1: Manufacturer: syz
[  279.426405][ T5819] usb 5-1: SerialNumber: syz
[  279.434361][ T5819] usb 5-1: config 0 descriptor??
[  279.453025][ T5819] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  279.689525][ T9590] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1239'.
[  279.751648][ T5819] usb 5-1: USB disconnect, device number 9
[  279.772467][ T5819] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  279.785772][ T9593] loop0: detected capacity change from 0 to 128
[  279.808596][ T9594] loop5: detected capacity change from 0 to 1024
[  279.824447][ T9593] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  279.838402][ T9594] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  279.903883][ T9593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  280.498059][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1246'.
[  280.610671][ T9607] IPv6: NLM_F_CREATE should be specified when creating new route
[  280.736225][ T9596] loop3: detected capacity change from 0 to 32768
[  280.769714][   T28] audit: type=1800 audit(34156230.469:241): pid=9596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1242" name="file1" dev="loop3" ino=4 res=0 errno=0
[  280.793324][ T9596] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong
[  280.793324][ T9596] 
[  280.887153][ T9596] ERROR: (device loop3): remounting filesystem as read-only
[  280.935055][ T9616] ERROR: (device loop3): diWrite: ixpxd invalid
[  280.935055][ T9616] 
[  280.935189][ T9616] ERROR: (device loop3): remounting filesystem as read-only
[  280.935231][ T9616] ERROR: (device loop3): txCommit: 
[  280.935231][ T9616] 
[  280.938868][ T9596] ialloc: diAlloc returned -5!
[  281.502915][ T9621] loop5: detected capacity change from 0 to 2048
[  281.614879][ T9621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.866279][ T6700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.881695][ T9611] loop4: detected capacity change from 0 to 32768
[  282.058951][ T9611] JBD2: Ignoring recovery information on journal
[  282.217992][ T9611] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  282.533726][ T6125] ocfs2: Unmounting device (7,4) on (node local)
[  283.064126][ T9637] loop4: detected capacity change from 0 to 2048
[  283.103187][ T9637] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  283.139648][ T9637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  283.243447][ T9637] UDF-fs: bad mount option "fscontext=system_u" or missing value
[  283.349538][ T6125] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh
[  283.363983][ T6125] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh
[  283.447775][ T9634] loop5: detected capacity change from 0 to 40427
[  283.484901][ T9634] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff
[  283.503869][ T9634] F2FS-fs (loop5): Image doesn't support compression
[  283.511535][ T9634] F2FS-fs (loop5): heap/no_heap options were deprecated
[  283.536141][ T9634] F2FS-fs (loop5): invalid crc value
[  283.573944][ T9634] F2FS-fs (loop5): Found nat_bits in checkpoint
[  283.717421][ T9634] F2FS-fs (loop5): Start checkpoint disabled!
[  283.778229][ T9634] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  283.925187][ T9634] F2FS-fs (loop5): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x181/0x910
[  284.148692][ T9652] loop3: detected capacity change from 0 to 512
[  284.204943][ T9652] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  284.307707][ T9652] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.1265: invalid indirect mapped block 32768 (level 2)
[  284.324538][ T9652] EXT4-fs (loop3): Remounting filesystem read-only
[  284.331571][ T9652] EXT4-fs (loop3): 1 orphan inode deleted
[  284.339956][ T9652] EXT4-fs (loop3): 1 truncate cleaned up
[  284.347542][ T9652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.390861][   T42] kworker/u4:2: attempt to access beyond end of device
[  284.390861][   T42] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  284.428405][   T42] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  284.443973][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.497459][   T42] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  284.523264][   T42] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  284.826697][   T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.065684][   T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.245261][   T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.457609][ T9672] input: syz0 as /devices/virtual/input/input18
[  285.506420][   T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.127251][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  286.141631][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  286.186186][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  286.236978][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  286.265570][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  286.273349][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  287.114521][ T9708] bond0: entered promiscuous mode
[  287.125494][ T9708] bond_slave_0: entered promiscuous mode
[  287.133744][ T9708] bond_slave_1: entered promiscuous mode
[  287.160767][ T9708] batadv0: entered promiscuous mode
[  287.184266][ T9708] 8021q: adding VLAN 0 to HW filter on device hsr1
[  287.724288][ T9706] loop0: detected capacity change from 0 to 32768
[  287.772404][ T2135] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  287.849460][ T9684] chnl_net:caif_netlink_parms(): no params data found
[  287.994105][ T2135] usb 4-1: Using ep0 maxpacket: 8
[  288.020738][ T2135] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  288.047102][ T2135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.068397][ T2135] usb 4-1: Product: syz
[  288.078533][ T2135] usb 4-1: Manufacturer: syz
[  288.092426][ T2135] usb 4-1: SerialNumber: syz
[  288.105837][ T2135] usb 4-1: config 0 descriptor??
[  288.353343][   T51] Bluetooth: hci2: command tx timeout
[  288.368844][ T2135] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  288.973008][ T2135] usb write operation failed. (-71)
[  288.987742][ T2135] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  288.999811][ T2135] dvbdev: DVB: registering new adapter (Terratec H7)
[  289.007314][ T2135] usb 4-1: media controller created
[  289.016737][ T2135] usb read operation failed. (-71)
[  289.023023][ T2135] usb write operation failed. (-71)
[  289.048362][ T2135] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5
[  289.062922][ T2135] usb 4-1: USB disconnect, device number 14
[  289.178058][ T9684] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.200939][ T9747] jffs2: notice: (9747) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  289.219698][ T9684] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.228174][ T9684] bridge_slave_0: entered allmulticast mode
[  289.236613][ T9684] bridge_slave_0: entered promiscuous mode
[  289.263988][   T60] hsr_slave_0: left promiscuous mode
[  289.277445][   T60] hsr_slave_1: left promiscuous mode
[  289.313547][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.331460][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.378707][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.386724][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.412779][   T60] bridge_slave_1: left allmulticast mode
[  289.418538][   T60] bridge_slave_1: left promiscuous mode
[  289.472810][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.491510][   T60] bridge_slave_0: left allmulticast mode
[  289.522547][   T60] bridge_slave_0: left promiscuous mode
[  289.528479][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.608107][   T60] team_slave_0: left promiscuous mode
[  289.614403][   T60] team_slave_1: left promiscuous mode
[  289.621999][   T60] veth1_macvtap: left promiscuous mode
[  289.629393][   T60] veth0_macvtap: left promiscuous mode
[  289.635492][   T60] veth1_vlan: left promiscuous mode
[  289.640918][   T60] veth0_vlan: left promiscuous mode
[  289.812548][ T2135] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  290.032194][ T2135] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.045306][ T2135] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.057353][ T2135] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  290.067429][ T2135] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.107004][ T2135] usb 6-1: config 0 descriptor??
[  290.444873][   T51] Bluetooth: hci2: command tx timeout
[  290.619610][ T2135] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  290.642032][ T2135] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  290.655404][ T2135] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  290.706332][ T2135] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  290.718157][ T2135] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  290.761316][ T2135] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0
[  290.917749][ T2135] playstation 0003:054C:0DF2.0008: Invalid reportID received, expected 9 got 140
[  290.950959][ T2135] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -22
[  291.011675][ T2135] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense
[  291.041010][ T2135] playstation 0003:054C:0DF2.0008: Failed to create dualsense.
[  291.087150][ T2135] playstation: probe of 0003:054C:0DF2.0008 failed with error -22
[  291.159718][ T2135] usb 6-1: USB disconnect, device number 13
[  291.660334][ T9764] loop3: detected capacity change from 0 to 131072
[  291.674077][ T9764] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  291.680866][ T9764] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  291.691720][ T9764] F2FS-fs (loop3): invalid crc value
[  291.734951][ T9764] F2FS-fs (loop3): Found nat_bits in checkpoint
[  291.831482][ T9764] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  291.838898][ T9764] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  292.259956][ T9773] loop5: detected capacity change from 0 to 4096
[  292.403599][ T9773] ntfs: volume version 3.1.
[  292.521327][   T51] Bluetooth: hci2: command tx timeout
[  292.606226][ T9773] ntfs: (device loop5): ntfs_nlstoucs(): Name using character set utf8 contains characters that cannot be converted to Unicode.
[  292.632738][ T9773] ntfs: (device loop5): ntfs_lookup(): Failed to convert name to Unicode.
[  292.643118][   T60] team0 (unregistering): Port device team_slave_1 removed
[  292.966702][   T60] team0 (unregistering): Port device team_slave_0 removed
[  293.218389][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.357483][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  294.515071][   T60] bond0 (unregistering): Released all slaves
[  294.609495][   T51] Bluetooth: hci2: command tx timeout
[  294.680640][ T9684] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.689653][ T9684] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.698460][ T9684] bridge_slave_1: entered allmulticast mode
[  294.706697][ T9684] bridge_slave_1: entered promiscuous mode
[  294.976592][ T9684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.026705][ T9684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.055898][ T9793] loop0: detected capacity change from 0 to 1024
[  295.197088][ T9684] team0: Port device team_slave_0 added
[  295.229101][ T9684] team0: Port device team_slave_1 added
[  295.377951][ T9684] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.419639][ T9684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.446402][ T9798] loop3: detected capacity change from 0 to 4096
[  295.521690][ T9802] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  295.567062][ T9684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.653346][ T9684] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.710577][ T9684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.768811][ T9684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.236187][ T9813] loop0: detected capacity change from 0 to 128
[  296.272093][ T9813] EXT4-fs: Ignoring removed i_version option
[  296.290436][ T9684] hsr_slave_0: entered promiscuous mode
[  296.313462][ T9684] hsr_slave_1: entered promiscuous mode
[  296.335978][ T9684] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  296.349494][ T9684] Cannot create hsr debugfs directory
[  296.356137][ T9813] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  296.662029][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  296.737174][ T9823] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  297.169996][ T9684] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  297.225518][ T9684] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  297.312500][ T9684] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  297.335938][ T9684] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  297.659752][ T9684] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.691731][ T9684] 8021q: adding VLAN 0 to HW filter on device team0
[  297.788089][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.795438][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.845135][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.852452][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.420513][ T9855] loop5: detected capacity change from 0 to 256
[  298.427131][ T5843] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  298.551128][ T9834] loop0: detected capacity change from 0 to 40427
[  298.611287][ T9834] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  298.626499][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.646595][ T9834] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  298.661812][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.700993][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  298.736485][ T9834] F2FS-fs (loop0): invalid crc value
[  298.741909][ T9834] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  298.757499][ T5843] usb 4-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00
[  298.760937][ T9684] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.800993][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.826994][ T5843] usb 4-1: config 0 descriptor??
[  298.844535][ T9834] F2FS-fs (loop0): Found nat_bits in checkpoint
[  299.086968][ T9834] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  299.113445][ T9834] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  299.253775][ T5843] wacom 0003:056A:002A.0009: unknown main item tag 0x2
[  299.260906][ T5843] wacom 0003:056A:002A.0009: unknown main item tag 0x0
[  299.313086][ T5843] wacom 0003:056A:002A.0009: unknown main item tag 0x2
[  299.346808][ T5843] wacom 0003:056A:002A.0009: unknown main item tag 0xe
[  299.385709][ T5843] wacom 0003:056A:002A.0009: Unknown device_type for 'HID 056a:002a'. Assuming pen.
[  299.422742][ T5843] wacom 0003:056A:002A.0009: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.3-1/input0
[  299.477988][ T5843] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:002A.0009/input/input19
[  299.505735][ T5789] syz-executor: attempt to access beyond end of device
[  299.505735][ T5789] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  299.575842][ T5789] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  299.731463][ T5843] usb 4-1: USB disconnect, device number 15
[  300.188962][ T9684] veth0_vlan: entered promiscuous mode
[  300.273890][ T9684] veth1_vlan: entered promiscuous mode
[  300.401609][ T9684] veth0_macvtap: entered promiscuous mode
[  300.437968][ T9684] veth1_macvtap: entered promiscuous mode
[  300.543926][ T9684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.572595][ T9684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.600904][ T9684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.628977][ T9684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.645673][ T9684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.660071][ T9684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.674805][ T9684] batman_adv: batadv0: Interface activated: batadv_slave_0
[  300.699467][ T9684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.717313][ T9684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.729584][ T9684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.757940][ T9684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.792319][ T9684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.805183][ T9684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.817874][ T9684] batman_adv: batadv0: Interface activated: batadv_slave_1
[  300.843496][ T9893] batadv0: entered promiscuous mode
[  300.886779][ T9893] bond0: entered promiscuous mode
[  300.892647][ T9893] bond_slave_0: entered promiscuous mode
[  300.898799][ T9893] bond_slave_1: entered promiscuous mode
[  300.912091][ T9893] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  300.923640][ T9893] Cannot create hsr debugfs directory
[  300.933168][ T9893] hsr1: entered allmulticast mode
[  300.944117][ T9893] batadv0: entered allmulticast mode
[  300.962483][ T9893] bond0: entered allmulticast mode
[  300.968184][ T9893] bond_slave_0: entered allmulticast mode
[  300.976646][ T9893] bond_slave_1: entered allmulticast mode
[  300.989662][ T9893] 8021q: adding VLAN 0 to HW filter on device hsr1
[  301.012499][ T9893] batadv0: left promiscuous mode
[  301.018973][ T9893] bond0: left promiscuous mode
[  301.028826][ T9893] bond_slave_0: left promiscuous mode
[  301.042804][ T9893] bond_slave_1: left promiscuous mode
[  301.195956][ T9684] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.232057][ T9684] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.257470][ T9684] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.288402][ T9684] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.564079][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.580623][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.623943][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.640753][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.162623][   T51] Bluetooth: hci1: link tx timeout
[  307.167845][   T51] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  309.232580][ T5792] Bluetooth: hci1: command 0x0406 tx timeout
[  318.127861][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  379.557773][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  412.352566][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  441.008214][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  460.832817][   T29] INFO: task kworker/u4:0:11 blocked for more than 143 seconds.
[  460.840552][   T29]       Not tainted syzkaller #0
[  460.845748][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  460.854567][   T29] task:kworker/u4:0    state:D stack:22344 pid:11    ppid:2      flags:0x00004000
[  460.864613][   T29] Workqueue: writeback wb_workfn (flush-8:0)
[  460.870817][   T29] Call Trace:
[  460.874741][   T29]  <TASK>
[  460.877943][   T29]  __schedule+0x15ae/0x4660
[  460.884020][   T29]  ? blk_mq_start_stopped_hw_queues+0x260/0x260
[  460.890655][   T29]  ? blk_mq_start_stopped_hw_queues+0x260/0x260
[  460.897101][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  460.905483][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  460.910593][   T29]  ? asan.module_dtor+0x20/0x20
[  460.916246][   T29]  ? blk_check_plugged+0x250/0x250
[  460.921500][   T29]  ? rq_wait_inc_below+0x11f/0x1a0
[  460.927948][   T29]  ? wq_worker_sleeping+0x63/0x240
[  460.933551][   T29]  schedule+0xbd/0x170
[  460.937699][   T29]  io_schedule+0x80/0xd0
[  460.942051][   T29]  rq_qos_wait+0x22b/0x360
[  460.946729][   T29]  ? wbt_inflight_cb+0x2f0/0x2f0
[  460.951736][   T29]  ? rq_depth_scale_down+0x2f0/0x2f0
[  460.957171][   T29]  ? rq_qos_wait+0x360/0x360
[  460.962475][   T29]  ? wbt_exit+0xb0/0xb0
[  460.966944][   T29]  ? blk_bio_list_merge+0xd0/0xd0
[  460.972048][   T29]  wbt_wait+0x34a/0x580
[  460.976389][   T29]  ? rwb_trace_step+0x320/0x320
[  460.981318][   T29]  ? dd_depth_updated+0x110/0x110
[  460.986528][   T29]  ? rwb_trace_step+0x320/0x320
[  460.991438][   T29]  __rq_qos_throttle+0x65/0xb0
[  460.997747][   T29]  blk_mq_submit_bio+0x8fb/0x2220
[  461.002951][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  461.008403][   T29]  ? blk_mq_plug_issue_direct+0x550/0x550
[  461.015790][   T29]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  461.022122][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  461.029252][   T29]  ? ktime_get+0x7f/0x280
[  461.034633][   T29]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  461.040962][   T29]  ? ktime_get_real_ts64+0x440/0x440
[  461.048343][   T29]  __submit_bio+0x12b/0x260
[  461.053028][   T29]  ? blk_free_queue_rcu+0x40/0x40
[  461.058154][   T29]  submit_bio_noacct_nocheck+0x6e8/0x9c0
[  461.064860][   T29]  ? __folio_end_writeback+0xe10/0xe10
[  461.070464][   T29]  ? __mod_lruvec_page_state+0xa5/0x410
[  461.076393][   T29]  ? should_fail_request+0x70/0x70
[  461.081586][   T29]  ? submit_bio_noacct+0xfba/0x1b30
[  461.091705][   T29]  ext4_bio_write_folio+0x16a4/0x22d0
[  461.097586][   T29]  mpage_submit_folio+0x231/0x3c0
[  461.103311][   T29]  mpage_process_page_bufs+0x6bf/0x8c0
[  461.109175][   T29]  mpage_prepare_extent_to_map+0xdd3/0x1d50
[  461.115534][   T29]  ? trace_ext4_writepages+0x1c0/0x1c0
[  461.121262][   T29]  ? kmem_cache_alloc+0x1a6/0x2c0
[  461.127849][   T29]  ext4_do_writepages+0xb46/0x3990
[  461.133684][   T29]  ? ext4_normal_submit_inode_data_buffers+0x240/0x240
[  461.140958][   T29]  ? rcu_read_lock_any_held+0xb4/0x140
[  461.148026][   T29]  ? __lock_acquire+0x1336/0x7d80
[  461.153767][   T29]  ext4_writepages+0x1dd/0x350
[  461.158710][   T29]  ? ext4_read_folio+0x2f0/0x2f0
[  461.165050][   T29]  ? reacquire_held_locks+0x31f/0x5c0
[  461.170505][   T29]  ? writeback_sb_inodes+0x35e/0x1020
[  461.178128][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  461.183726][   T29]  ? ext4_read_folio+0x2f0/0x2f0
[  461.188944][   T29]  do_writepages+0x351/0x590
[  461.194181][   T29]  ? folio_clear_dirty_for_io+0xca0/0xca0
[  461.199979][   T29]  ? writeback_sb_inodes+0x4bd/0x1020
[  461.205549][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  461.210682][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  461.216507][   T29]  __writeback_single_inode+0x14e/0xee0
[  461.222136][   T29]  writeback_sb_inodes+0x813/0x1020
[  461.227656][   T29]  ? queue_io+0x530/0x530
[  461.232084][   T29]  __writeback_inodes_wb+0x114/0x240
[  461.238446][   T29]  wb_writeback+0x472/0xbe0
[  461.243179][   T29]  ? queue_io+0x391/0x530
[  461.247595][   T29]  ? percpu_ref_tryget+0x250/0x250
[  461.253216][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  461.259266][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  461.264875][   T29]  wb_workfn+0xad7/0xe60
[  461.269914][   T29]  ? inode_wait_for_writeback+0x230/0x230
[  461.277772][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  461.284247][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  461.289442][   T29]  ? read_lock_is_recursive+0x20/0x20
[  461.296480][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  461.301931][   T29]  ? process_scheduled_works+0x975/0x1600
[  461.308195][   T29]  ? process_scheduled_works+0x975/0x1600
[  461.314652][   T29]  process_scheduled_works+0xa60/0x1600
[  461.320291][   T29]  ? worker_attach_to_pool+0x370/0x370
[  461.326422][   T29]  ? assign_work+0x3cc/0x5d0
[  461.331407][   T29]  worker_thread+0xa5e/0xfe0
[  461.336310][   T29]  kthread+0x2fa/0x390
[  461.340444][   T29]  ? pr_cont_work+0x550/0x550
[  461.345346][   T29]  ? kthread_blkcg+0xd0/0xd0
[  461.350169][   T29]  ret_from_fork+0x48/0x80
[  461.355013][   T29]  ? kthread_blkcg+0xd0/0xd0
[  461.359681][   T29]  ret_from_fork_asm+0x11/0x20
[  461.364683][   T29]  </TASK>
[  461.368743][   T29] INFO: task jbd2/sda1-8:5103 blocked for more than 143 seconds.
[  461.378004][   T29]       Not tainted syzkaller #0
[  461.383505][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  461.392378][   T29] task:jbd2/sda1-8     state:D stack:25736 pid:5103  ppid:2      flags:0x00004000
[  461.401684][   T29] Call Trace:
[  461.405712][   T29]  <TASK>
[  461.408712][   T29]  __schedule+0x15ae/0x4660
[  461.413716][   T29]  ? asan.module_dtor+0x20/0x20
[  461.418974][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  461.424495][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  461.430476][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  461.436060][   T29]  schedule+0xbd/0x170
[  461.440195][   T29]  io_schedule+0x80/0xd0
[  461.444594][   T29]  bit_wait_io+0x11/0xd0
[  461.448904][   T29]  __wait_on_bit+0x9f/0x2c0
[  461.453542][   T29]  ? bit_wait+0xd0/0xd0
[  461.457875][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  461.463572][   T29]  ? bit_wait+0xd0/0xd0
[  461.467811][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  461.473729][   T29]  ? do_raw_write_lock+0x11e/0x260
[  461.478967][   T29]  ? bit_waitqueue+0x30/0x30
[  461.484042][   T29]  ? do_raw_read_unlock+0x3d/0x80
[  461.489197][   T29]  jbd2_journal_commit_transaction+0x2e8d/0x5ad0
[  461.503724][   T29]  ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0
[  461.510704][   T29]  ? lock_chain_count+0x20/0x20
[  461.516366][   T29]  ? _raw_spin_unlock+0x40/0x40
[  461.521870][   T29]  ? __try_to_del_timer_sync+0x1c2/0x280
[  461.529167][   T29]  ? __timer_delete_sync+0x23d/0x2e0
[  461.536348][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  461.541475][   T29]  ? timer_delete_sync+0x20/0x20
[  461.547047][   T29]  ? do_raw_read_unlock+0x80/0x80
[  461.552169][   T29]  ? prepare_to_wait+0x1aa/0x200
[  461.557718][   T29]  kjournald2+0x40f/0x810
[  461.562787][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  461.568100][   T29]  ? wake_bit_function+0x200/0x200
[  461.574528][   T29]  ? _raw_spin_unlock+0x40/0x40
[  461.579502][   T29]  ? __kthread_parkme+0x71/0x1c0
[  461.585090][   T29]  ? __kthread_parkme+0x15b/0x1c0
[  461.590185][   T29]  kthread+0x2fa/0x390
[  461.595193][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  461.600506][   T29]  ? kthread_blkcg+0xd0/0xd0
[  461.605835][   T29]  ret_from_fork+0x48/0x80
[  461.610325][   T29]  ? kthread_blkcg+0xd0/0xd0
[  461.615355][   T29]  ret_from_fork_asm+0x11/0x20
[  461.620210][   T29]  </TASK>
[  461.635663][   T29] INFO: task syz-executor:5763 blocked for more than 144 seconds.
[  461.643725][   T29]       Not tainted syzkaller #0
[  461.648714][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  461.657651][   T29] task:syz-executor    state:D stack:21648 pid:5763  ppid:5762   flags:0x00004002
[  461.667063][   T29] Call Trace:
[  461.670393][   T29]  <TASK>
[  461.673420][   T29]  __schedule+0x15ae/0x4660
[  461.678040][   T29]  ? mark_lock+0x94/0x320
[  461.682730][   T29]  ? asan.module_dtor+0x20/0x20
[  461.687677][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  461.693182][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  461.699163][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  461.704858][   T29]  schedule+0xbd/0x170
[  461.709023][   T29]  io_schedule+0x80/0xd0
[  461.713699][   T29]  bit_wait_io+0x11/0xd0
[  461.718042][   T29]  __wait_on_bit+0x9f/0x2c0
[  461.723379][   T29]  ? bit_wait+0xd0/0xd0
[  461.727661][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  461.733578][   T29]  ? bit_wait+0xd0/0xd0
[  461.737835][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  461.743169][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  461.748293][   T29]  ? bit_waitqueue+0x30/0x30
[  461.754345][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  461.759636][   T29]  do_get_write_access+0x5c9/0xe00
[  461.765181][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  461.771255][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  461.777937][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  461.784510][   T29]  ? __might_sleep+0xe0/0xe0
[  461.789195][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  461.795458][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  461.801069][   T29]  ext4_dirty_inode+0xcb/0x110
[  461.806220][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  461.812099][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  461.817491][   T29]  file_update_time+0x187/0x1a0
[  461.822638][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  461.828199][   T29]  ? do_wp_page+0x4ce/0x34d0
[  461.833352][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  461.839946][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  461.845350][   T29]  do_page_mkwrite+0x153/0x3f0
[  461.850184][   T29]  do_wp_page+0xd4d/0x34d0
[  461.854995][   T29]  ? folio_put+0xd0/0xd0
[  461.859316][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  461.865701][   T29]  ? __rwlock_init+0x150/0x150
[  461.870555][   T29]  handle_mm_fault+0x1306/0x4a50
[  461.875923][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  461.881043][   T29]  ? numa_migrate_prep+0x350/0x350
[  461.886584][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  461.891940][   T29]  do_user_addr_fault+0x736/0x12d0
[  461.897450][   T29]  exc_page_fault+0x64/0x100
[  461.902130][   T29]  ? clear_bhb_loop+0x40/0x90
[  461.907292][   T29]  asm_exc_page_fault+0x26/0x30
[  461.912338][   T29] RIP: 0033:0x7f3e2267c6e2
[  461.916819][   T29] RSP: 002b:00007ffd3d04b110 EFLAGS: 00010202
[  461.923005][   T29] RAX: 00007f3e20490000 RBX: 000055559331d6b0 RCX: 0000000000000007
[  461.931834][   T29] RDX: 0000000000003398 RSI: 000055559331a378 RDI: 0000000000000080
[  461.939941][   T29] RBP: 00007ffd3d04b610 R08: 000055559331a3f0 R09: 0000000000000091
[  461.951662][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd3d04b450
[  461.961382][   T29] R13: 00007ffd3d04b240 R14: 585858582e7a7973 R15: 00007ffd3d04b190
[  461.969637][   T29]  </TASK>
[  461.972950][   T29] INFO: task syz-executor:9684 blocked for more than 144 seconds.
[  461.980830][   T29]       Not tainted syzkaller #0
[  461.986300][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  461.995142][   T29] task:syz-executor    state:D stack:21800 pid:9684  ppid:9662   flags:0x00004000
[  462.004514][   T29] Call Trace:
[  462.007826][   T29]  <TASK>
[  462.010774][   T29]  __schedule+0x15ae/0x4660
[  462.016070][   T29]  ? mark_lock+0x94/0x320
[  462.020474][   T29]  ? asan.module_dtor+0x20/0x20
[  462.025740][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  462.031346][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  462.038328][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  462.044220][   T29]  schedule+0xbd/0x170
[  462.048378][   T29]  io_schedule+0x80/0xd0
[  462.054593][   T29]  bit_wait_io+0x11/0xd0
[  462.058927][   T29]  __wait_on_bit+0x9f/0x2c0
[  462.065009][   T29]  ? bit_wait+0xd0/0xd0
[  462.069521][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  462.076488][   T29]  ? bit_wait+0xd0/0xd0
[  462.080820][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  462.087129][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  462.092387][   T29]  ? bit_waitqueue+0x30/0x30
[  462.099178][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  462.104524][   T29]  do_get_write_access+0x5c9/0xe00
[  462.109729][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  462.116042][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  462.122587][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  462.128862][   T29]  ? __might_sleep+0xe0/0xe0
[  462.134143][   T29]  ? posix_acl_create+0x169/0x440
[  462.139385][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  462.145191][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  462.150772][   T29]  __ext4_new_inode+0x309a/0x3aa0
[  462.156098][   T29]  ? ext4_has_group_desc_csum+0x1f0/0x1f0
[  462.161937][   T29]  ext4_mkdir+0x40b/0xc90
[  462.167629][   T29]  ? ext4_symlink+0x940/0x940
[  462.172529][   T29]  ? inode_permission+0xf3/0x480
[  462.177890][   T29]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  462.183137][   T29]  ? security_inode_mkdir+0xb7/0x100
[  462.188635][   T29]  vfs_mkdir+0x2a5/0x470
[  462.194839][   T29]  do_mkdirat+0x1dc/0x450
[  462.199896][   T29]  ? vfs_mkdir+0x470/0x470
[  462.204721][   T29]  __x64_sys_mkdirat+0x89/0xa0
[  462.209558][   T29]  do_syscall_64+0x55/0xb0
[  462.214412][   T29]  ? clear_bhb_loop+0x40/0x90
[  462.219170][   T29]  ? clear_bhb_loop+0x40/0x90
[  462.224256][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  462.230245][   T29] RIP: 0033:0x7fd98f99cfc7
[  462.235894][   T29] RSP: 002b:00007fff78492638 EFLAGS: 00000206 ORIG_RAX: 0000000000000102
[  462.244904][   T29] RAX: ffffffffffffffda RBX: 00007fd98fa34a7f RCX: 00007fd98f99cfc7
[  462.253509][   T29] RDX: 00000000000001ff RSI: 00007fd98fa34a7f RDI: 00000000ffffff9c
[  462.261553][   T29] RBP: 00007fd98fc267b8 R08: 0000000000000000 R09: 0000000000000000
[  462.270027][   T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  462.278565][   T29] R13: 0000000000000003 R14: 00007fff784928a8 R15: 0000000000000000
[  462.287295][   T29]  </TASK>
[  462.290543][   T29] INFO: task syz.5.1336:9892 blocked for more than 144 seconds.
[  462.299758][   T29]       Not tainted syzkaller #0
[  462.306138][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  462.316085][   T29] task:syz.5.1336      state:D stack:27048 pid:9892  ppid:6700   flags:0x00004004
[  462.325886][   T29] Call Trace:
[  462.329313][   T29]  <TASK>
[  462.332495][   T29]  __schedule+0x15ae/0x4660
[  462.337122][   T29]  ? mark_lock+0x94/0x320
[  462.341879][   T29]  ? asan.module_dtor+0x20/0x20
[  462.347063][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  462.352155][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  462.358395][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  462.364749][   T29]  schedule+0xbd/0x170
[  462.368900][   T29]  io_schedule+0x80/0xd0
[  462.373385][   T29]  bit_wait_io+0x11/0xd0
[  462.377703][   T29]  __wait_on_bit+0x9f/0x2c0
[  462.382344][   T29]  ? bit_wait+0xd0/0xd0
[  462.387893][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  462.394393][   T29]  ? bit_wait+0xd0/0xd0
[  462.398618][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  462.405029][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  462.410156][   T29]  ? bit_waitqueue+0x30/0x30
[  462.415475][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  462.420824][   T29]  do_get_write_access+0x5c9/0xe00
[  462.426932][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  462.433393][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  462.439649][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  462.452314][   T29]  ? __might_sleep+0xe0/0xe0
[  462.457059][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  462.463189][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  462.468755][   T29]  ext4_dirty_inode+0xcb/0x110
[  462.473693][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  462.479595][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  462.484923][   T29]  file_update_time+0x187/0x1a0
[  462.489862][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  462.496650][   T29]  ? filemap_fault+0x103c/0x1540
[  462.501703][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  462.507702][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  462.517155][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  462.522492][   T29]  ? __pte_offset_map+0x20d/0x280
[  462.527585][   T29]  do_page_mkwrite+0x153/0x3f0
[  462.535448][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  462.540549][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  462.546161][   T29]  ? numa_migrate_prep+0x350/0x350
[  462.551365][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  462.556904][   T29]  do_user_addr_fault+0x736/0x12d0
[  462.562112][   T29]  exc_page_fault+0x64/0x100
[  462.567045][   T29]  asm_exc_page_fault+0x26/0x30
[  462.571981][   T29] RIP: 0033:0x7f3375e72f32
[  462.576523][   T29] RSP: 002b:00007ffc4548daf0 EFLAGS: 00010202
[  462.582842][   T29] RAX: 000000000000c008 RBX: 00007f3376d55720 RCX: 0000000000000000
[  462.591011][   T29] RDX: 0000001b2e918000 RSI: 0000000000000008 RDI: 00007f3376d55720
[  462.600013][   T29] RBP: 0000000000000dcc R08: 00007f3376210000 R09: 00007f3376226038
[  462.608304][   T29] R10: 0000000000000007 R11: 0000000000000003 R12: ffffffff8a6b7901
[  462.619594][   T29] R13: 00007f3376226038 R14: 00000000000001be R15: ffffffffffff4000
[  462.627756][   T29]  ? hsr_netdev_notify+0x401/0xb50
[  462.635040][   T29]  </TASK>
[  462.642814][   T29] INFO: task syz.3.1339:9906 blocked for more than 145 seconds.
[  462.650973][   T29]       Not tainted syzkaller #0
[  462.659789][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  462.668736][   T29] task:syz.3.1339      state:D stack:27560 pid:9906  ppid:5780   flags:0x00004004
[  462.678316][   T29] Call Trace:
[  462.681681][   T29]  <TASK>
[  462.684732][   T29]  __schedule+0x15ae/0x4660
[  462.689503][   T29]  ? mark_lock+0x94/0x320
[  462.695429][   T29]  ? asan.module_dtor+0x20/0x20
[  462.700367][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  462.705592][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  462.711562][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  462.717431][   T29]  schedule+0xbd/0x170
[  462.721598][   T29]  io_schedule+0x80/0xd0
[  462.727415][   T29]  bit_wait_io+0x11/0xd0
[  462.731839][   T29]  __wait_on_bit+0x9f/0x2c0
[  462.736948][   T29]  ? bit_wait+0xd0/0xd0
[  462.741204][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  462.749182][   T29]  ? bit_wait+0xd0/0xd0
[  462.755442][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  462.760304][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  462.770269][   T29]  ? bit_waitqueue+0x30/0x30
[  462.775091][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  462.780348][   T29]  do_get_write_access+0x5c9/0xe00
[  462.785728][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  462.791890][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  462.798207][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  462.804817][   T29]  ? __might_sleep+0xe0/0xe0
[  462.809597][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  462.815304][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  462.820868][   T29]  ext4_dirty_inode+0xcb/0x110
[  462.825939][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  462.831822][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  462.840695][   T29]  file_update_time+0x187/0x1a0
[  462.845784][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  462.851377][   T29]  ? filemap_fault+0x103c/0x1540
[  462.859499][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  462.866169][   T29]  ? pte_alloc_one+0x3b6/0x540
[  462.870995][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  462.877697][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  462.882934][   T29]  do_page_mkwrite+0x153/0x3f0
[  462.887864][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  462.892960][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  462.897983][   T29]  ? numa_migrate_prep+0x350/0x350
[  462.903307][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  462.908671][   T29]  do_user_addr_fault+0x736/0x12d0
[  462.914688][   T29]  exc_page_fault+0x64/0x100
[  462.919375][   T29]  ? clear_bhb_loop+0x40/0x90
[  462.924480][   T29]  asm_exc_page_fault+0x26/0x30
[  462.929406][   T29] RIP: 0033:0x7ff0d3c6baa3
[  462.934203][   T29] RSP: 002b:00007ffd9fc8fc80 EFLAGS: 00010246
[  462.940336][   T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2dd64000
[  462.949273][   T29] RDX: 0000001b2dd24000 RSI: 0000000000600000 RDI: 00007ff0d3fe0708
[  462.958340][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  462.967251][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  462.975952][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd9fc8ff10
[  462.984200][   T29]  </TASK>
[  462.988396][   T29] INFO: task syz.0.1340:9907 blocked for more than 145 seconds.
[  463.001017][   T29]       Not tainted syzkaller #0
[  463.006149][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  463.015798][   T29] task:syz.0.1340      state:D stack:27560 pid:9907  ppid:5789   flags:0x00004004
[  463.025335][   T29] Call Trace:
[  463.028664][   T29]  <TASK>
[  463.031648][   T29]  __schedule+0x15ae/0x4660
[  463.037405][   T29]  ? mark_lock+0x94/0x320
[  463.041807][   T29]  ? asan.module_dtor+0x20/0x20
[  463.047156][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  463.052467][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  463.058867][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  463.064695][   T29]  schedule+0xbd/0x170
[  463.068882][   T29]  io_schedule+0x80/0xd0
[  463.074864][   T29]  bit_wait_io+0x11/0xd0
[  463.079234][   T29]  __wait_on_bit+0x9f/0x2c0
[  463.084146][   T29]  ? bit_wait+0xd0/0xd0
[  463.088641][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  463.094296][   T29]  ? bit_wait+0xd0/0xd0
[  463.098554][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  463.104439][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  463.110232][   T29]  ? bit_waitqueue+0x30/0x30
[  463.115144][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  463.120441][   T29]  do_get_write_access+0x5c9/0xe00
[  463.125826][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  463.131892][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  463.138302][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  463.144700][   T29]  ? __might_sleep+0xe0/0xe0
[  463.149375][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  463.155295][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  463.161315][   T29]  ext4_dirty_inode+0xcb/0x110
[  463.166247][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  463.172150][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  463.177410][   T29]  file_update_time+0x187/0x1a0
[  463.182517][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  463.187634][   T29]  ? filemap_fault+0x103c/0x1540
[  463.193144][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  463.198968][   T29]  ? pte_alloc_one+0x3b6/0x540
[  463.203920][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  463.210420][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  463.216297][   T29]  do_page_mkwrite+0x153/0x3f0
[  463.221157][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  463.228318][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  463.233567][   T29]  ? numa_migrate_prep+0x350/0x350
[  463.238962][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  463.244492][   T29]  do_user_addr_fault+0x736/0x12d0
[  463.249708][   T29]  exc_page_fault+0x64/0x100
[  463.254550][   T29]  ? clear_bhb_loop+0x40/0x90
[  463.259631][   T29]  asm_exc_page_fault+0x26/0x30
[  463.264786][   T29] RIP: 0033:0x7f277886baa3
[  463.269520][   T29] RSP: 002b:00007fffef38f0f0 EFLAGS: 00010246
[  463.275937][   T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2da64000
[  463.284181][   T29] RDX: 0000001b2da24000 RSI: 0000000000600000 RDI: 00007f2778be0708
[  463.292411][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  463.300446][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  463.309199][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffef38f380
[  463.318707][   T29]  </TASK>
[  463.321914][   T29] 
[  463.321914][   T29] Showing all locks held in the system:
[  463.334829][   T29] 4 locks held by kworker/u4:0/11:
[  463.340035][   T29]  #0: ffff88801ca7bd38 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  463.351858][   T29]  #1: ffffc90000107d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  463.364910][   T29]  #2: ffff88814de400e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[  463.375898][   T29]  #3: ffff88814de42c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  463.387631][   T29] 1 lock held by khungtaskd/29:
[  463.392900][   T29]  #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  463.403387][   T29] 3 locks held by kworker/u4:10/3537:
[  463.408817][   T29] 2 locks held by getty/5535:
[  463.414978][   T29]  #0: ffff88802d1ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  463.425490][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  463.435847][   T29] 3 locks held by syz-executor/5763:
[  463.441188][   T29]  #0: ffff88802c5260a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  463.451413][   T29]  #1: ffff88814de40510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  463.461526][   T29]  #2: ffff88814de44990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  463.472051][   T29] 3 locks held by syz-executor/9684:
[  463.477470][   T29]  #0: ffff88814de40418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  463.486904][   T29]  #1: ffff88805a2f9810 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450
[  463.499226][   T29]  #2: ffff88814de44990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  463.509316][   T29] 3 locks held by syz.5.1336/9892:
[  463.514561][   T29]  #0: ffff88802c525720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  463.527153][   T29]  #1: ffff88814de40510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  463.537101][   T29]  #2: ffff88814de44990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  463.547104][   T29] 3 locks held by syz.3.1339/9906:
[  463.553140][   T29]  #0: ffff88802c5227a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  463.563593][   T29]  #1: ffff88814de40510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  463.574240][   T29]  #2: ffff88814de44990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  463.584523][   T29] 3 locks held by syz.0.1340/9907:
[  463.589858][   T29]  #0: ffff88802c5273a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  463.599994][   T29]  #1: ffff88814de40510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  463.610156][   T29]  #2: ffff88814de44990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  463.621802][   T29] 
[  463.624671][   T29] =============================================
[  463.624671][   T29] 
[  463.633402][   T29] NMI backtrace for cpu 1
[  463.637880][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  463.645216][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  463.655338][   T29] Call Trace:
[  463.658696][   T29]  <TASK>
[  463.661671][   T29]  dump_stack_lvl+0x18c/0x250
[  463.666417][   T29]  ? __wake_up_klogd+0xd9/0x100
[  463.671334][   T29]  ? show_regs_print_info+0x20/0x20
[  463.676611][   T29]  ? load_image+0x420/0x420
[  463.681263][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  463.686296][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  463.692588][   T29]  ? load_image+0x420/0x420
[  463.697136][   T29]  ? wq_watchdog_touch+0xef/0x170
[  463.702287][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  463.708435][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  463.714464][   T29]  watchdog+0xf59/0xfa0
[  463.718698][   T29]  ? watchdog+0x1e1/0xfa0
[  463.723079][   T29]  kthread+0x2fa/0x390
[  463.727195][   T29]  ? hungtask_pm_notify+0x50/0x50
[  463.732269][   T29]  ? kthread_blkcg+0xd0/0xd0
[  463.737000][   T29]  ret_from_fork+0x48/0x80
[  463.741473][   T29]  ? kthread_blkcg+0xd0/0xd0
[  463.746103][   T29]  ret_from_fork_asm+0x11/0x20
[  463.750919][   T29]  </TASK>
[  463.754659][   T29] Sending NMI from CPU 1 to CPUs 0:
[  463.759948][    C0] NMI backtrace for cpu 0
[  463.759961][    C0] CPU: 0 PID: 1087 Comm: kworker/u4:5 Not tainted syzkaller #0
[  463.759979][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  463.759990][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  463.760062][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60
[  463.760089][    C0] Code: 80 35 7c 7e 65 8b 15 81 35 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 24 16 00 00 00 74 2c 8b 91 00 16 00 00 <83> fa 02 75 21 48 8b 91 08 16 00 00 48 8b 32 48 8d 7e 01 8b 89 04
[  463.760161][    C0] RSP: 0018:ffffc900042e7548 EFLAGS: 00000046
[  463.760176][    C0] RAX: ffffffff84347f88 RBX: 000000007b978578 RCX: ffff8880238cbc00
[  463.760189][    C0] RDX: 0000000000000000 RSI: 0000000080e8902d RDI: 00000000006f8540
[  463.760199][    C0] RBP: 00000000d21976db R08: 0000000058a0fef0 R09: 000000002c02cede
[  463.760210][    C0] R10: 0000000021821a5a R11: 00000000967893be R12: 000000005118173a
[  463.760222][    C0] R13: 000000002f5e431b R14: 0000000099b18a59 R15: 000000004fe40bc2
[  463.760234][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  463.760248][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  463.760259][    C0] CR2: 0000563c6b2ef168 CR3: 000000000cf32000 CR4: 00000000003506f0
[  463.760274][    C0] Call Trace:
[  463.760280][    C0]  <TASK>
[  463.760286][    C0]  chacha_permute+0x4a8/0xef0
[  463.760338][    C0]  chacha_block_generic+0xc6/0xda0
[  463.760362][    C0]  ? __crypto_xor+0xcc0/0xcc0
[  463.760392][    C0]  crng_fast_key_erasure+0x15f/0x260
[  463.760426][    C0]  ? extract_entropy+0x8a0/0x8a0
[  463.760448][    C0]  ? worker_thread+0xa5e/0xfe0
[  463.760480][    C0]  crng_make_state+0x259/0x700
[  463.760505][    C0]  ? crng_make_state+0x142/0x700
[  463.760527][    C0]  ? urandom_read_iter+0x140/0x140
[  463.760557][    C0]  _get_random_bytes+0x100/0x250
[  463.760580][    C0]  ? get_random_bytes+0x20/0x20
[  463.760604][    C0]  ? __kmalloc_node_track_caller+0xe2/0x230
[  463.760636][    C0]  ? __alloc_skb+0x1b2/0x2c0
[  463.760683][    C0]  ? skb_put+0x112/0x210
[  463.760703][    C0]  nsim_dev_trap_report_work+0x2e9/0xa90
[  463.760728][    C0]  ? process_scheduled_works+0x975/0x1600
[  463.760752][    C0]  process_scheduled_works+0xa60/0x1600
[  463.760789][    C0]  ? worker_attach_to_pool+0x370/0x370
[  463.760814][    C0]  ? assign_work+0x3cc/0x5d0
[  463.760838][    C0]  worker_thread+0xa5e/0xfe0
[  463.760874][    C0]  kthread+0x2fa/0x390
[  463.760891][    C0]  ? pr_cont_work+0x550/0x550
[  463.760913][    C0]  ? kthread_blkcg+0xd0/0xd0
[  463.760929][    C0]  ret_from_fork+0x48/0x80
[  463.760951][    C0]  ? kthread_blkcg+0xd0/0xd0
[  463.760968][    C0]  ret_from_fork_asm+0x11/0x20
[  463.761000][    C0]  </TASK>
[  464.038442][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  464.045470][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  464.052735][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  464.062841][   T29] Call Trace:
[  464.066222][   T29]  <TASK>
[  464.069191][   T29]  dump_stack_lvl+0x18c/0x250
[  464.073931][   T29]  ? show_regs_print_info+0x20/0x20
[  464.079273][   T29]  ? load_image+0x420/0x420
[  464.083831][   T29]  panic+0x2ca/0x720
[  464.087941][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  464.092531][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  464.098297][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  464.103718][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  464.109953][   T29]  watchdog+0xf98/0xfa0
[  464.114164][   T29]  ? watchdog+0x1e1/0xfa0
[  464.118536][   T29]  kthread+0x2fa/0x390
[  464.122634][   T29]  ? hungtask_pm_notify+0x50/0x50
[  464.127734][   T29]  ? kthread_blkcg+0xd0/0xd0
[  464.132412][   T29]  ret_from_fork+0x48/0x80
[  464.136890][   T29]  ? kthread_blkcg+0xd0/0xd0
[  464.141699][   T29]  ret_from_fork_asm+0x11/0x20
[  464.146625][   T29]  </TASK>
[  464.150286][   T29] Kernel Offset: disabled
[  464.154715][   T29] Rebooting in 86400 seconds..