last executing test programs:

1m35.753583143s ago: executing program 1 (id=196):
syz_usb_connect(0x6, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff00070581020002"], 0x0)
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c8000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000400)={0x0, 0x1, 0x8, "ebaa550303010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1m33.677564145s ago: executing program 1 (id=218):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='n', 0x1}], 0x1}}], 0x1, 0x80)
setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4)
recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0)

1m33.414193292s ago: executing program 1 (id=221):
io_uring_setup(0x68f6, 0x0)
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610)

1m33.191436847s ago: executing program 1 (id=225):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_lower}, {@fat=@sys_immutable}, {@fat=@showexec}, {@shortname_win95}, {@shortname_winnt}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=")
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20)

1m32.961407904s ago: executing program 1 (id=228):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x8000002)

1m32.436446156s ago: executing program 1 (id=235):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4)
mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)

1m32.152558964s ago: executing program 32 (id=235):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4)
mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)

4.228754174s ago: executing program 0 (id=1248):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpuidle/current_driver\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/100, 0x64)

4.024369729s ago: executing program 0 (id=1253):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2)

3.742887416s ago: executing program 0 (id=1254):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)="04080076657273696f6e00020548000004080070726f66696c650007050400666f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000004", 0x6a)

3.422275034s ago: executing program 0 (id=1258):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x121000)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0)

3.387961515s ago: executing program 3 (id=1259):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

3.240231939s ago: executing program 0 (id=1260):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x20a27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8)
syz_mount_image$f2fs(&(0x7f0000000840), &(0x7f0000000880)='./file1\x00', 0x100000c, &(0x7f00000008c0)=ANY=[], 0xfd, 0x105e2, &(0x7f0000002000)="$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")
lchown(&(0x7f0000000700)='.\x00', 0xee00, 0x0)

2.664975564s ago: executing program 3 (id=1262):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

2.457496759s ago: executing program 0 (id=1263):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.3947609s ago: executing program 5 (id=1265):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/syz_tun/forwarding\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

2.39365616s ago: executing program 3 (id=1266):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2)

2.145560256s ago: executing program 3 (id=1269):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10)
close(0x3)

2.021460769s ago: executing program 5 (id=1270):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='./debugfs\x00', &(0x7f0000000200)='./debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debugfs/dri/1/Virtual-1/edid_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)="00ffffffffffff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x80)

1.903414492s ago: executing program 4 (id=1271):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x0, 0x29}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0xffffffff, 0x0, 0xa, 0x2, 0x0, 0xb5}}, 0xf0}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20)

1.902375683s ago: executing program 3 (id=1272):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x80, 0x2, &(0x7f0000000100)={0x22, "42319c9b7f8071ef3c3c0b340c3975ef02d749cb174540ffccf818447846d9fe22"}})

1.844269074s ago: executing program 2 (id=1273):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xfffffff8)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

1.696467998s ago: executing program 4 (id=1274):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x0)

1.675356008s ago: executing program 5 (id=1275):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r2], 0x1})

1.544531351s ago: executing program 2 (id=1276):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x6}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2)

1.344427037s ago: executing program 4 (id=1277):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

1.344190116s ago: executing program 5 (id=1278):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0)
recvmmsg(r1, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}, 0xae}, {{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000006d00)=""/4082, 0xff2}], 0x1}, 0x6}], 0x2, 0x10002, 0x0)

1.302121317s ago: executing program 2 (id=1279):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setns(0xc9, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)

1.149441551s ago: executing program 4 (id=1280):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00')
unshare(0x2a020480)
fchdir(r0)
getcwd(&(0x7f0000000100)=""/115, 0x73)

1.016530485s ago: executing program 2 (id=1281):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x48, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}]]}, 0x48}}, 0x80)

995.166465ms ago: executing program 5 (id=1282):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='lz4', 0x3)

864.972048ms ago: executing program 2 (id=1283):
syz_mount_image$bfs(&(0x7f00000002c0), &(0x7f0000000740)='./bus\x00', 0x8008, &(0x7f00000008c0)=ANY=[@ANYRES8=0x0], 0xf, 0xb2, &(0x7f0000000a80)="$eJzs1zFKA1EUBdA7U+i0NiJYWE/jGnQpYqmNWCmCOxA34lZcwvQWFtOGkB/ITAgJ6QITCOcUH+6/PHjt+539XH+3SflMSnv18lc2Xt/enx6ehzdJ7sKpqZOcJ2mS3FwM+f9+6Kqx7/qPx67fM3z2NfW6AADAAercbudFGT/m4xW4CpfrvtmZrybYEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCYlgEAAP//jI4oyQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
openat(r0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x1bf)

772.558811ms ago: executing program 4 (id=1284):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0xc0104d08, &(0x7f0000000900))

697.582142ms ago: executing program 5 (id=1285):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='mydomain \\ 64\n', 0xe)

563.048346ms ago: executing program 4 (id=1286):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='0o', 0x2)

416.51792ms ago: executing program 2 (id=1287):
syz_usb_connect$uac1(0x3, 0x7c, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x3, 0x1, 0x0, 0x80, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe3c8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x80, 0x2, {0x7, 0x25, 0x1, 0x0, 0x6, 0xc999}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7fff, 0x6, 0x2a, 0x61}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x5, 0x8, {0x7, 0x25, 0x1, 0xc, 0x6, 0x6}}}}}}}}]}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="c50f29bd7000004000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0e012a"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

0s ago: executing program 3 (id=1288):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x7, 0xcc26, 0xffb, 0x8, 0xb68, 0xbd, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x8, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x200, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf5, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x4, 0x10, 0x6, 0x6, 0x3, 0xffffffc0, 0xece0, 0x5a3, 0x6, 0x0, 0x100, 0x5, 0x252, 0x81, 0x400b, 0x3, 0x20006, 0x5, 0x2, 0xb, 0x1, 0xd9d, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x8, 0x0, 0xff, 0x66cd, 0x6, 0x8000, 0x2008da0, 0x1fc, 0x0, 0x4]}})
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f0000000280))

kernel console output (not intermixed with test programs):

x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   81.692792][  T128] cp210x 4-1:0.0: device disconnected
[   81.729751][ T4724] F2FS-fs (loop2): Found nat_bits in checkpoint
[   81.857092][ T4724] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   81.872013][ T4724] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   82.114435][ T4324] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   82.127732][ T4324] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   83.467185][ T4779] netlink: 68 bytes leftover after parsing attributes in process `syz.4.167'.
[   83.496320][ T4784] ip_tables: iptables: counters copy to user failed while replacing table
[   83.848800][ T4794] loop1: detected capacity change from 0 to 2048
[   83.950568][ T4794] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   83.961699][ T4794] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.988035][ T4794] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.174: bg 0: block 345: padding at end of block bitmap is not set
[   84.203651][ T4283] EXT4-fs (loop1): unmounting filesystem.
[   84.439033][ T4821] Zero length message leads to an empty skb
[   84.576440][ T4822] loop0: detected capacity change from 0 to 4096
[   84.636474][ T4822] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[   84.686849][ T4822] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[   84.758378][ T4822] ntfs: volume version 3.1.
[   85.089172][ T4836] sch_tbf: burst 2464 is lower than device lo mtu (65550) !
[   85.094566][ T4814] loop1: detected capacity change from 0 to 32768
[   85.149503][ T4816] loop2: detected capacity change from 0 to 32768
[   85.335721][ T4816] XFS (loop2): Mounting V5 Filesystem
[   85.434535][ T4816] XFS (loop2): Ending clean mount
[   85.529912][ T4816] XFS (loop2): Quotacheck needed: Please wait.
[   85.614416][ T4816] XFS (loop2): Quotacheck: Done.
[   85.731416][ T4317] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   85.740465][ T4863] Falling back ldisc for ptm0.
[   85.860193][ T4281] XFS (loop2): Unmounting Filesystem
[   85.933400][ T4317] usb 2-1: config index 0 descriptor too short (expected 46, got 32)
[   85.950421][ T4317] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.973435][ T4317] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   85.987025][ T4317] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 0.00
[   85.996655][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.432602][ T4317] usb 2-1: BOGUS urb xfer, pipe 1 != type 3
[   86.679030][ T4317] usb 2-1: USB disconnect, device number 4
[   86.679078][    C1] usb 2-1: comm data receiver aborted.
[   86.991379][ T4498] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   87.139450][ T4886] loop3: detected capacity change from 0 to 32768
[   87.159699][ T4886] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[   87.164756][ T4880] loop2: detected capacity change from 0 to 40427
[   87.216835][ T4498] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.221152][ T4880] F2FS-fs (loop2): invalid crc value
[   87.256752][ T4498] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   87.292413][ T4498] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.300461][ T4498] usb 1-1: Product: syz
[   87.306467][ T4880] F2FS-fs (loop2): Found nat_bits in checkpoint
[   87.326057][ T4498] usb 1-1: Manufacturer: syz
[   87.351766][ T4498] usb 1-1: SerialNumber: syz
[   87.447029][ T4897] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[   87.493816][ T4880] F2FS-fs (loop2): Start checkpoint disabled!
[   87.552682][ T4880] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   87.916199][ T4922] loop1: detected capacity change from 0 to 128
[   87.975916][    T9] kworker/u4:0: attempt to access beyond end of device
[   87.975916][    T9] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   88.029586][    T9] kworker/u4:0: attempt to access beyond end of device
[   88.029586][    T9] loop2: rw=2049, sector=40984, nr_sectors = 8 limit=40427
[   88.213421][ T4498] cdc_ncm 1-1:1.0: SET_CRC_MODE failed
[   88.231918][ T4498] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed
[   88.270940][ T4498] cdc_ncm 1-1:1.0: bind() failure
[   88.311768][ T4498] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   88.333439][ T4498] cdc_ncm 1-1:1.1: bind() failure
[   88.364622][ T4498] usb 1-1: USB disconnect, device number 3
[   88.600797][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.744044][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.865866][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.009794][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.137556][ T4951] loop2: detected capacity change from 0 to 512
[   89.231937][ T4951] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.241: Invalid block bitmap block 0 in block_group 0
[   89.302301][ T4951] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   89.331453][ T4951] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.241: attempt to clear invalid blocks 983261 len 1
[   89.345258][ T4951] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.241: invalid indirect mapped block 2683928664 (level 0)
[   89.359974][ T4951] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.241: Invalid inode table block 0 in block_group 0
[   89.379757][ T4951] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[   89.413768][ T4951] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[   89.447469][ T4951] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.241: Invalid inode table block 0 in block_group 0
[   89.481167][ T4951] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[   89.517075][ T4951] EXT4-fs error (device loop2): ext4_truncate:4325: inode #13: comm syz.2.241: mark_inode_dirty error
[   89.561568][ T4951] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[   89.590917][ T4951] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.241: Invalid inode table block 0 in block_group 0
[   89.635544][ T4951] EXT4-fs (loop2): 1 truncate cleaned up
[   89.641237][ T4951] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   89.695073][ T4961] loop4: detected capacity change from 0 to 16
[   89.779007][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   89.782216][ T4961] MTD: Attempt to mount non-MTD device "/dev/loop4"
[   89.796125][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   89.804150][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   89.825450][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   89.833673][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   89.840882][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.029387][ T4281] EXT4-fs (loop2): unmounting filesystem.
[   90.231960][ T4976] sctp: [Deprecated]: syz.2.247 (pid 4976) Use of int in maxseg socket option.
[   90.231960][ T4976] Use struct sctp_assoc_value instead
[   90.335159][ T4979] loop4: detected capacity change from 0 to 2048
[   90.365352][ T4946] loop0: detected capacity change from 0 to 40427
[   90.379655][ T4946] F2FS-fs (loop0): invalid crc value
[   90.431220][ T4946] F2FS-fs (loop0): Found nat_bits in checkpoint
[   90.519826][ T4979] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   90.530084][ T4946] F2FS-fs (loop0): Start checkpoint disabled!
[   90.612534][ T4946] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   90.667260][   T26] audit: type=1800 audit(1791882383.465:263): pid=4992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.248" name="proc" dev="loop4" ino=18 res=0 errno=0
[   90.763064][ T4962] chnl_net:caif_netlink_parms(): no params data found
[   90.864541][ T4272] EXT4-fs (loop4): unmounting filesystem.
[   91.054511][   T34] kworker/u4:2: attempt to access beyond end of device
[   91.054511][   T34] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   91.186684][ T4962] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.194094][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.202490][ T4962] device bridge_slave_0 entered promiscuous mode
[   91.211223][ T4962] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.219391][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.227697][ T4962] device bridge_slave_1 entered promiscuous mode
[   91.290139][ T4962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.410667][ T4962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.547133][   T11] device hsr_slave_0 left promiscuous mode
[   91.563677][   T11] device hsr_slave_1 left promiscuous mode
[   91.598838][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.611940][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.640993][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.658854][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.680785][   T11] device bridge_slave_1 left promiscuous mode
[   91.691811][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.703966][ T5016] loop3: detected capacity change from 0 to 64
[   91.739168][   T11] device bridge_slave_0 left promiscuous mode
[   91.751697][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.817085][   T11] device veth1_macvtap left promiscuous mode
[   91.823895][   T11] device veth0_macvtap left promiscuous mode
[   91.836873][   T11] device veth1_vlan left promiscuous mode
[   91.842929][   T11] device veth0_vlan left promiscuous mode
[   91.851875][ T5016] hfs: request for non-existent node 131072 in B*Tree
[   91.858839][ T5016] hfs: request for non-existent node 131072 in B*Tree
[   91.911503][ T4277] Bluetooth: hci4: command 0x0409 tx timeout
[   92.594023][ T5035] loop4: detected capacity change from 0 to 256
[   92.794316][   T11] team0 (unregistering): Port device team_slave_1 removed
[   92.839883][   T11] team0 (unregistering): Port device team_slave_0 removed
[   92.878103][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.919159][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.223638][   T11] bond0 (unregistering): Released all slaves
[   93.315133][ T4962] team0: Port device team_slave_0 added
[   93.348860][ T4962] team0: Port device team_slave_1 added
[   93.402604][ T4962] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.420641][ T4962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.451535][ T4317] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   93.492401][ T4962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.532722][ T4962] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.563382][ T4962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.614617][ T5056] MTRR 1 not used
[   93.643046][ T4317] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.647258][ T4962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.671973][ T4317] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.706729][ T4317] usb 5-1: config 0 interface 0 has no altsetting 0
[   93.722221][ T4317] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[   93.740540][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.768398][ T4317] usb 5-1: config 0 descriptor??
[   93.784143][ T4962] device hsr_slave_0 entered promiscuous mode
[   93.811210][ T4962] device hsr_slave_1 entered promiscuous mode
[   93.823449][ T4962] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.847523][ T4962] Cannot create hsr debugfs directory
[   93.991633][ T4277] Bluetooth: hci4: command 0x041b tx timeout
[   94.047019][ T5068] loop0: detected capacity change from 0 to 128
[   94.114099][ T5068] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   94.160070][ T5068] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.201653][ T4962] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   94.217237][ T4962] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   94.227192][ T4962] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   94.241708][ T4962] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   94.324851][ T5053] loop2: detected capacity change from 0 to 32768
[   94.364572][ T4962] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.380830][ T4271] EXT4-fs (loop0): unmounting filesystem.
[   94.386138][ T4962] 8021q: adding VLAN 0 to HW filter on device team0
[   94.399607][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   94.410945][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   94.417596][ T5053] XFS (loop2): Mounting V5 Filesystem
[   94.419442][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   94.434633][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   94.444665][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.451805][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.463746][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   94.472492][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   94.481445][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   94.490153][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.497328][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.518419][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   94.560354][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   94.575513][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   94.583905][ T5053] XFS (loop2): Ending clean mount
[   94.596170][ T4317] sony 0003:054C:0268.0001: can't set operational mode: step 1
[   94.616180][ T4317] sony 0003:054C:0268.0001: Failed to set controller into operational mode
[   94.626449][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   94.635502][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   94.652073][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   94.674652][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   94.677171][ T5088] loop3: detected capacity change from 0 to 16
[   94.698041][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   94.703697][ T5088] erofs: (device loop3): mounted with root inode @ nid 36.
[   94.709654][ T4317] sony 0003:054C:0268.0001: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.4-1/input0
[   94.734778][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   94.749759][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   94.760916][ T4317] sony 0003:054C:0268.0001: failed to claim input
[   94.779582][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.781227][ T5088] syz.3.281: attempt to access beyond end of device
[   94.781227][ T5088] loop3: rw=0, sector=8, nr_sectors = 32 limit=16
[   94.822195][ T4317] usb 5-1: USB disconnect, device number 2
[   94.834224][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   94.842042][ T4498] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   94.850686][ T5053] XFS (loop2): Quotacheck needed: Please wait.
[   94.863322][ T5090] syz.3.281: attempt to access beyond end of device
[   94.863322][ T5090] loop3: rw=524288, sector=16, nr_sectors = 32 limit=16
[   94.971723][ T5053] XFS (loop2): Quotacheck: Done.
[   95.031776][ T4498] usb 1-1: Using ep0 maxpacket: 32
[   95.043454][ T4498] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.086679][ T4498] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   95.148493][ T4498] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[   95.192332][ T4498] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   95.256535][ T4498] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   95.291651][ T4498] usb 1-1: config 1 interface 1 has no altsetting 0
[   95.304799][ T5093] fido_id[5093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   95.347802][ T4281] XFS (loop2): Unmounting Filesystem
[   95.357360][ T4498] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   95.370416][ T4498] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.399563][ T4498] usb 1-1: Product: syz
[   95.412558][ T4498] usb 1-1: Manufacturer: syz
[   95.435099][ T4498] usb 1-1: SerialNumber: syz
[   95.572311][ T5101] netlink: 108 bytes leftover after parsing attributes in process `syz.3.282'.
[   95.688300][ T4498] usb 1-1: selecting invalid altsetting 0
[   95.847861][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.870615][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.899407][ T4498] usb 1-1: 1:1: cannot get freq (v2/v3): err -32
[   95.918336][ T4962] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.072939][ T4277] Bluetooth: hci4: command 0x040f tx timeout
[   96.132095][ T4498] usb 1-1: 1:1: cannot get freq (v2/v3): err -71
[   96.305743][ T4498] usb 1-1: USB disconnect, device number 4
[   96.424797][ T4488] udevd[4488]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   96.490629][ T5131] loop3: detected capacity change from 0 to 256
[   96.532989][ T5131] exfat: Deprecated parameter 'utf8'
[   96.535960][ T4497] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   96.538388][ T5131] exfat: Deprecated parameter 'namecase'
[   96.573180][ T5131] exfat: Deprecated parameter 'utf8'
[   96.613543][ T5131] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   96.741561][ T4497] usb 3-1: Using ep0 maxpacket: 16
[   96.748756][ T4497] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.781408][ T4497] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   96.809971][ T4497] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   96.835082][ T4497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.845727][ T4497] usb 3-1: Product: syz
[   96.850399][ T4497] usb 3-1: Manufacturer: syz
[   96.855726][ T4497] usb 3-1: SerialNumber: syz
[   96.865023][ T5139] loop4: detected capacity change from 0 to 1024
[   96.907297][ T5139] EXT4-fs: Ignoring removed mblk_io_submit option
[   96.971441][ T5139] EXT4-fs: Ignoring removed oldalloc option
[   97.083214][ T5139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   97.097320][ T4497] usb 3-1: 0:2 : does not exist
[   97.115070][ T4497] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   97.139332][ T5139] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.167480][ T4497] usb 3-1: USB disconnect, device number 3
[   97.198580][ T5139] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.292: lblock 3 mapped to illegal pblock 3 (length 3)
[   97.199682][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   97.235857][ T5139] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   97.249660][ T5139] EXT4-fs (loop4): This should not happen!! Data will be lost
[   97.249660][ T5139] 
[   97.260143][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   97.307617][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   97.321189][   T34] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 5)
[   97.327213][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   97.354385][ T4962] device veth0_vlan entered promiscuous mode
[   97.362104][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   97.370259][   T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   97.385701][   T34] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117
[   97.409013][ T4962] device veth1_vlan entered promiscuous mode
[   97.420051][   T34] EXT4-fs (loop4): This should not happen!! Data will be lost
[   97.420051][   T34] 
[   97.435487][ T4897] udevd[4897]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   97.456342][   T65] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 112: padding at end of block bitmap is not set
[   97.475607][   T65] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[   97.488661][   T65] EXT4-fs (loop4): This should not happen!! Data will be lost
[   97.488661][   T65] 
[   97.489866][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   97.505511][   T65] EXT4-fs (loop4): Total free blocks count 0
[   97.529474][   T65] EXT4-fs (loop4): Free/Dirty block details
[   97.537263][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   97.544682][   T65] EXT4-fs (loop4): free_blocks=0
[   97.555455][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   97.574154][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   97.587240][ T4962] device veth0_macvtap entered promiscuous mode
[   97.619865][ T4962] device veth1_macvtap entered promiscuous mode
[   97.694902][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.723478][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.745586][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.771454][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.786927][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.816866][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.842017][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.861338][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.883919][ T4962] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.909463][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   97.923171][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   97.938536][ T5172] Illegal XDP return value 1417798160 on prog  (id 23) dev N/A, expect packet loss!
[   97.949989][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   97.966849][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   98.007267][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.039202][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.070084][ T5176] #! ./dev
[   98.082649][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.103449][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.136619][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.151568][ T4277] Bluetooth: hci4: command 0x0419 tx timeout
[   98.174548][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.189942][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.206371][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.218090][ T4962] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.251521][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   98.267654][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   98.308416][ T5189] loop3: detected capacity change from 0 to 256
[   98.316712][ T4962] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.346853][ T4962] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.377883][ T4962] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.396828][ T4962] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.526575][   T26] audit: type=1800 audit(1791882391.325:264): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.308" name="protocol" dev="configfs" ino=37139 res=0 errno=0
[   98.634496][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.655101][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.700477][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   98.762489][ T5199] loop4: detected capacity change from 0 to 512
[   98.793205][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.834678][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.856032][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   98.860257][ T5199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   98.950699][ T5199] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.970935][ T5207] sctp: [Deprecated]: syz.0.314 (pid 5207) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.970935][ T5207] Use struct sctp_sack_info instead
[   99.293699][ T5220] loop0: detected capacity change from 0 to 128
[   99.325943][ T4272] EXT4-fs (loop4): unmounting filesystem.
[   99.383384][ T5220] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   99.457861][ T5220] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   99.494143][ T4316] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   99.607202][ T5220] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x16)
[   99.681579][ T4316] usb 3-1: Using ep0 maxpacket: 32
[   99.689365][ T4316] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[   99.718064][ T4316] usb 3-1: config 0 has no interface number 0
[   99.750102][ T4271] EXT4-fs (loop0): unmounting filesystem.
[   99.750249][ T4316] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   99.816931][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.847286][ T4316] usb 3-1: Product: syz
[   99.849872][ T5237] device erspan0 entered promiscuous mode
[   99.869020][ T4316] usb 3-1: Manufacturer: syz
[   99.888991][ T4316] usb 3-1: SerialNumber: syz
[   99.916692][ T4316] usb 3-1: config 0 descriptor??
[   99.956908][ T4316] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  100.170510][ T4316] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  100.204836][ T4316] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  100.230194][ T5256] loop4: detected capacity change from 0 to 512
[  100.251643][ T4497] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  100.325702][ T5256] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.330: corrupted inode contents
[  100.384244][ T5256] EXT4-fs (loop4): Remounting filesystem read-only
[  100.390799][ T5256] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  100.405140][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 226
[  100.454446][ T4497] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  100.471022][ T5256] EXT4-fs (loop4): Remounting filesystem read-only
[  100.494517][ T4497] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  100.531504][ T5256] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.330: corrupted inode contents
[  100.564732][ T4497] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  100.584938][ T4497] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.593484][ T5256] EXT4-fs (loop4): Remounting filesystem read-only
[  100.598675][ T5267] loop3: detected capacity change from 0 to 1024
[  100.616645][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  100.617480][ T5256] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.330: mark_inode_dirty error
[  100.628343][ T4319] usb 3-1: USB disconnect, device number 4
[  100.645156][ T4497] usb 6-1: Product: syz
[  100.665555][ T4497] usb 6-1: Manufacturer: syz
[  100.671798][ T4497] usb 6-1: SerialNumber: syz
[  100.685937][ T4319] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  100.720799][ T5270] loop0: detected capacity change from 0 to 2048
[  100.728057][ T5256] EXT4-fs (loop4): Remounting filesystem read-only
[  100.746585][ T4319] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  100.770162][ T5256] EXT4-fs (loop4): 1 orphan inode deleted
[  100.803917][ T5270] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  100.817447][ T4319] quatech2 3-1:0.51: device disconnected
[  100.825668][ T5256] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  100.845831][ T5270] UDF-fs: Scanning with blocksize 512 failed
[  100.930793][ T5270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  101.099462][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  101.287240][ T5279] netlink: 32 bytes leftover after parsing attributes in process `syz.4.337'.
[  101.460414][ T5284] kAFS: bad VL server IP address
[  101.493956][ T5282] loop2: detected capacity change from 0 to 2048
[  101.547155][ T4497] usb 6-1: failed to send ARPC request 1: -71
[  101.581778][ T4497] usb 6-1: failed to execute ARPC: -71
[  101.618401][ T4497] usb 6-1: failed to set connected state for cport 0: -71
[  101.658616][ T4497] greybus greybus1: 0/0:0: failed to set connected state: -71
[  101.696976][ T5292] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.711640][ T4497] usb 6-1: failed to send ARPC request 3: -71
[  101.717889][ T4497] usb 6-1: failed to execute ARPC: -71
[  101.764625][ T4497] usb 6-1: failed to clear cport 0: -71
[  101.770334][ T4497] greybus greybus1: 0/0:0: failed to clear host cport: -71
[  101.818955][ T4497] es2_ap_driver: probe of 6-1:1.0 failed with error -71
[  101.849051][ T4497] usb 6-1: USB disconnect, device number 2
[  101.945795][ T5292] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  101.962997][ T5292] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  101.981425][ T5292] Remounting filesystem read-only
[  102.074764][ T4281] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  102.397140][ T5319] process 'syz.5.351' launched '/dev/fd/3' with NULL argv: empty string added
[  102.653800][ T5324] loop9: detected capacity change from 0 to 524287936
[  103.020475][   T26] audit: type=1326 audit(1791882395.815:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  103.106932][   T26] audit: type=1326 audit(1791882395.815:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  103.213412][   T26] audit: type=1326 audit(1791882395.815:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  103.362182][   T26] audit: type=1326 audit(1791882395.815:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  103.471490][   T26] audit: type=1326 audit(1791882395.815:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  103.551555][   T26] audit: type=1326 audit(1791882395.865:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  103.620300][   T26] audit: type=1326 audit(1791882395.875:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  103.701967][   T26] audit: type=1326 audit(1791882395.875:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb54939e042 code=0x7ffc0000
[  103.727717][   T26] audit: type=1326 audit(1791882395.875:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb54939e0d7 code=0x7ffc0000
[  103.787326][   T26] audit: type=1326 audit(1791882395.875:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb54935afd1 code=0x7ffc0000
[  103.792089][ T4317] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  103.811147][    C1] vkms_vblank_simulate: vblank timer overrun
[  103.827323][   T26] audit: type=1326 audit(1791882395.875:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb54939f0c9 code=0x7ffc0000
[  103.888739][   T26] audit: type=1326 audit(1791882395.875:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb54935b03b code=0x7ffc0000
[  103.935798][   T26] audit: type=1326 audit(1791882395.875:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  104.021420][   T26] audit: type=1326 audit(1791882395.875:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  104.047312][   T26] audit: type=1326 audit(1791882395.875:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5333 comm="syz.0.355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb54935a72c code=0x7ffc0000
[  104.081384][ T4317] usb 5-1: Using ep0 maxpacket: 16
[  104.098476][ T4317] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.170483][ T4317] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.211381][ T4317] usb 5-1: config 0 interface 0 has no altsetting 0
[  104.228306][ T4317] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  104.258740][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.296106][ T4317] usb 5-1: config 0 descriptor??
[  104.721007][ T4317] uclogic 0003:28BD:0042.0002: interface is invalid, ignoring
[  105.015332][ T4317] usb 5-1: USB disconnect, device number 3
[  105.287998][ T5423] program syz.3.384 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  105.427923][ T5409] loop0: detected capacity change from 0 to 32768
[  105.529287][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'.
[  105.580656][ T5432] loop2: detected capacity change from 0 to 512
[  105.664677][ T5432] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  105.689128][ T5432] ext4 filesystem being mounted at /54/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.861156][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  106.711451][ T4284] Bluetooth: hci2: command 0x2016 tx timeout
[  106.909834][ T5448] loop2: detected capacity change from 0 to 32768
[  106.955309][ T5448] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  107.079642][ T5483] loop3: detected capacity change from 0 to 1024
[  107.125470][ T5483] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  107.250842][ T5483] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  107.296794][ T4897] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  107.608669][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  107.690544][ T5509] loop2: detected capacity change from 0 to 512
[  107.742130][ T5509] EXT4-fs: Ignoring removed bh option
[  107.782376][ T5509] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  107.859243][ T5509] EXT4-fs (loop2): 1 truncate cleaned up
[  107.941444][ T5509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  107.988693][ T5509] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.412: bg 0: block 465: padding at end of block bitmap is not set
[  108.036590][ T5523] team0: Cannot enslave team device to itself
[  108.083182][ T5509] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  108.132678][ T5509] EXT4-fs (loop2): This should not happen!! Data will be lost
[  108.132678][ T5509] 
[  108.151789][ T4317] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  108.161977][ T5509] EXT4-fs (loop2): Total free blocks count 0
[  108.185970][ T5509] EXT4-fs (loop2): Free/Dirty block details
[  108.194210][ T5509] EXT4-fs (loop2): free_blocks=0
[  108.199273][ T5509] EXT4-fs (loop2): dirty_blocks=2
[  108.222462][ T5509] EXT4-fs (loop2): Block reservation details
[  108.235353][ T5509] EXT4-fs (loop2): i_reserved_data_blocks=2
[  108.315502][   T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  108.348553][ T4317] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  108.359341][ T5534] loop0: detected capacity change from 0 to 4096
[  108.379735][ T4317] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  108.415190][ T4317] usb 5-1: New USB device found, idVendor=4c51, idProduct=94dc, bcdDevice=bb.f6
[  108.456154][ T5534] ntfs: volume version 3.1.
[  108.468449][ T4317] usb 5-1: New USB device strings: Mfr=254, Product=68, SerialNumber=194
[  108.508712][ T4317] usb 5-1: Product: syz
[  108.514440][ T4317] usb 5-1: Manufacturer: syz
[  108.540077][ T4317] usb 5-1: SerialNumber: syz
[  108.602361][ T4317] usb-storage 5-1:1.0: USB Mass Storage device detected
[  108.658766][ T4317] scsi host1: usb-storage 5-1:1.0
[  108.817377][ T4317] usb 5-1: USB disconnect, device number 4
[  109.229996][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'.
[  109.686112][ T5562] loop2: detected capacity change from 0 to 32768
[  109.916177][ T5590] loop5: detected capacity change from 0 to 136
[  110.354440][ T5601] loop5: detected capacity change from 0 to 2048
[  110.409486][ T5601] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  110.475603][ T5601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.598112][ T5609] loop2: detected capacity change from 0 to 512
[  110.709324][ T5609] EXT4-fs (loop2): 1 truncate cleaned up
[  110.717470][ T5609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  110.777863][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  110.798223][ T5615] loop5: detected capacity change from 0 to 512
[  110.848652][ T5615] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.454: iget: bad i_size value: 38620345925642
[  110.912119][ T5595] loop3: detected capacity change from 0 to 32768
[  110.932979][ T5615] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.454: couldn't read orphan inode 15 (err -117)
[  110.934437][ T5595] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  110.957465][ T5615] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  111.070559][   T26] kauditd_printk_skb: 594 callbacks suppressed
[  111.070572][   T26] audit: type=1800 audit(1791882404.868:874): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.454" name="file1" dev="loop5" ino=18 res=0 errno=0
[  111.081840][ T5615] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.454: bg 0: block 5: invalid block bitmap
[  111.254872][ T4395] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  111.291934][ T5628] program syz.3.459 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  111.377222][ T4962] EXT4-fs (loop5): unmounting filesystem.
[  111.471594][ T5632] syz.0.461 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  111.535634][   T26] audit: type=1807 audit(1791882405.338:875): action=measure uid>+ res=0
[  111.536684][ T5636] ima: policy update failed
[  111.562205][   T26] audit: type=1802 audit(1791882405.338:876): pid=5637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.462" res=0 errno=0
[  111.604408][ T5638] netlink: 68 bytes leftover after parsing attributes in process `syz.2.465'.
[  111.621943][ T5634] EXT4-fs: Ignoring removed bh option
[  111.645770][   T26] audit: type=1802 audit(1791882405.378:877): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.462" res=0 errno=0
[  111.694271][ T5634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  112.042635][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  112.342080][ T5668] kAFS: bad VL server IP address
[  112.963670][ T5691] netlink: 64 bytes leftover after parsing attributes in process `syz.3.484'.
[  113.191586][ T4498] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  113.209719][ T5705] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  113.383377][ T4498] usb 3-1: Using ep0 maxpacket: 32
[  113.387438][ T5701] set_capacity_and_notify: 1 callbacks suppressed
[  113.387452][ T5701] loop5: detected capacity change from 0 to 8192
[  113.389277][ T5710] netlink: 508 bytes leftover after parsing attributes in process `syz.4.491'.
[  113.418050][ T4498] usb 3-1: config index 0 descriptor too short (expected 27632, got 27)
[  113.449906][ T4498] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  113.451901][ T5701] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  113.482286][ T4498] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  113.512169][ T4498] usb 3-1: config 1 has no interface number 0
[  113.530133][ T4498] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  113.563530][ T4498] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  113.607303][ T4498] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  113.637814][ T4498] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.686688][ T4498] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  113.902523][ T4498] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  114.200083][ T5732] loop0: detected capacity change from 0 to 1024
[  114.209250][ T5732] EXT4-fs: Ignoring removed bh option
[  114.257763][ T5732] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  114.371013][ T4498] usb 3-1: USB disconnect, device number 5
[  114.402551][ T4498] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  114.470467][ T5745] loop4: detected capacity change from 0 to 256
[  114.487790][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  115.539187][ T5773] No such timeout policy "syz1"
[  115.567529][ T5760] loop3: detected capacity change from 0 to 32768
[  115.610425][ T5760] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  115.651438][ T4319] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  115.848905][ T4319] usb 3-1: Using ep0 maxpacket: 16
[  115.860292][ T4319] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.879813][ T4897] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  115.890898][ T4319] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.931140][ T4319] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  115.982423][ T5789] loop5: detected capacity change from 0 to 64
[  115.986773][ T4319] usb 3-1: config 0 interface 0 has no altsetting 0
[  116.015997][ T4319] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00
[  116.048398][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.095467][ T4319] usb 3-1: config 0 descriptor??
[  116.244191][ T5799] loop0: detected capacity change from 0 to 1024
[  116.519952][ T4319] waltop 0003:172F:0032.0003: unknown main item tag 0x3
[  116.537616][ T4319] waltop 0003:172F:0032.0003: unbalanced collection at end of report description
[  116.557685][ T4319] waltop: probe of 0003:172F:0032.0003 failed with error -22
[  116.645820][ T5813] program syz.4.537 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  116.747567][ T4319] usb 3-1: USB disconnect, device number 6
[  116.919581][ T5825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.542'.
[  117.537241][ T5852] kAFS: Invalid Command on /proc/fs/afs/cells file
[  117.807115][ T5865] loop4: detected capacity change from 0 to 2048
[  117.896569][ T5873] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  117.969980][ T5873] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  118.022658][ T5873] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  118.067438][ T5873] Remounting filesystem read-only
[  118.129952][ T5880] Bluetooth: MGMT ver 1.22
[  118.189319][ T4272] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  118.452874][ T5891] input: syz0 as /devices/virtual/input/input11
[  118.484502][ T5894] tun0: tun_chr_ioctl cmd 1074025681
[  118.855382][ T5908] program syz.5.575 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  118.904099][ T5910] loop3: detected capacity change from 0 to 512
[  118.979645][ T5910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  119.011472][ T5910] System zones: 1-12
[  119.054520][   T26] audit: type=1400 audit(1791882412.858:878): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=5913 comm="syz.2.576" name="unknown" offset=16
[  119.108528][ T5910] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.574: missing EA_INODE flag
[  119.183217][ T5903] loop4: detected capacity change from 0 to 32768
[  119.189888][ T5910] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.574: error while reading EA inode 12 err=-117
[  119.239998][ T5910] EXT4-fs (loop3): 1 orphan inode deleted
[  119.251969][ T5910] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  119.262887][ T5903] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  119.262887][ T5903] 
[  119.335941][ T5910] fscrypt (loop3, inode 15): Direct key flag not allowed with different contents and filenames modes
[  119.479468][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  119.506550][ T5928] loop5: detected capacity change from 0 to 512
[  119.723091][ T5936] loop3: detected capacity change from 0 to 512
[  120.285836][ T5951] loop3: detected capacity change from 0 to 256
[  120.306401][ T5951] exfat: Deprecated parameter 'utf8'
[  120.324168][ T5951] exfat: Deprecated parameter 'namecase'
[  120.341261][ T5951] exfat: Deprecated parameter 'utf8'
[  120.412315][ T5951] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  120.599201][ T5967] capability: warning: `syz.2.593' uses deprecated v2 capabilities in a way that may be insecure
[  120.953007][   T26] audit: type=1326 audit(1791882414.758:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=5982 comm="syz.0.599" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  120.977019][    C0] vkms_vblank_simulate: vblank timer overrun
[  121.047652][ T5987] loop4: detected capacity change from 0 to 512
[  121.062480][   T26] audit: type=1326 audit(1791882414.788:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=5982 comm="syz.0.599" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  121.082388][ T5987] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿ01777777777777777777777" or missing value
[  121.176010][ T5994] loop0: detected capacity change from 0 to 256
[  121.211379][   T26] audit: type=1326 audit(1791882414.788:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=5982 comm="syz.0.599" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  121.235138][ T5994] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  121.371398][   T26] audit: type=1326 audit(1791882414.788:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=5982 comm="syz.0.599" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  121.412832][ T6000] loop2: detected capacity change from 0 to 256
[  121.456346][   T26] audit: type=1326 audit(1791882414.788:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=5982 comm="syz.0.599" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  121.481749][ T4497] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  121.494964][ T6000] exfat: Deprecated parameter 'utf8'
[  121.512043][ T6000] exfat: Deprecated parameter 'namecase'
[  121.523869][ T6000] exfat: Deprecated parameter 'utf8'
[  121.561712][ T6000] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  121.573891][   T26] audit: type=1326 audit(1791882414.788:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=5982 comm="syz.0.599" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  121.611008][ T6006] netlink: 'syz.5.608': attribute type 3 has an invalid length.
[  121.652458][   T26] audit: type=1326 audit(1791882414.788:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=5982 comm="syz.0.599" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  121.676452][    C0] vkms_vblank_simulate: vblank timer overrun
[  121.715916][   T26] audit: type=1326 audit(1791882414.788:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=5982 comm="syz.0.599" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  121.718249][ T6008] loop0: detected capacity change from 0 to 256
[  121.739943][    C0] vkms_vblank_simulate: vblank timer overrun
[  121.742525][ T4497] usb 5-1: not running at top speed; connect to a high speed hub
[  121.785389][ T4497] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  121.801379][ T4497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.811948][   T26] audit: type=1326 audit(1791882414.788:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=5982 comm="syz.0.599" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb54939e2d9 code=0x7ffc0000
[  121.836504][ T4350] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  121.857349][ T4497] usb 5-1: Product: syz
[  121.866690][ T4497] usb 5-1: Manufacturer: syz
[  121.879208][ T4497] usb 5-1: SerialNumber: syz
[  121.888324][ T6012] loop5: detected capacity change from 0 to 512
[  121.901153][ T4497] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected
[  121.917801][ T6012] EXT4-fs: Ignoring removed nobh option
[  121.946427][ T6008] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  121.959113][ T6012] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  121.981874][ T4497] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  121.987616][ T6012] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  122.040764][ T4497] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  122.053695][ T4350] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.078023][ T6012] EXT4-fs (loop5): 1 truncate cleaned up
[  122.089721][ T4350] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  122.095496][ T6012] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  122.106002][    C0] usb 5-1: malformed indat packet
[  122.113281][    C0] usb 5-1: malformed indat packet
[  122.118611][    C0] usb 5-1: malformed indat packet
[  122.124164][    C0] usb 5-1: malformed indat packet
[  122.129461][    C0] usb 5-1: malformed indat packet
[  122.141222][    C0] usb 5-1: malformed indat packet
[  122.151335][ T4497] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  122.169839][    C0] usb 5-1: malformed indat packet
[  122.177156][ T4350] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  122.192856][    C0] usb 5-1: malformed indat packet
[  122.203032][ T4497] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  122.231781][ T4350] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  122.275365][ T6012] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  122.287982][ T4350] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  122.310379][ T4350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.333771][ T6021] device erspan0 entered promiscuous mode
[  122.500300][ T4496] usb 5-1: USB disconnect, device number 5
[  122.532791][ T4496] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  122.589654][ T4962] EXT4-fs (loop5): unmounting filesystem.
[  122.598648][ T4496] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  122.654707][ T4496] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  122.695736][ T4496] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  122.741967][ T4496] keyspan 5-1:1.0: device disconnected
[  122.957802][ T6041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.619'.
[  123.051452][ T4350] gud 4-1:1.0: Failed to get properties (error=-71)
[  123.076488][ T4350] gud: probe of 4-1:1.0 failed with error -71
[  123.130641][ T4350] usb 4-1: USB disconnect, device number 3
[  123.420338][ T6055] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  123.469084][ T6055] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  123.578498][ T4897] udevd[4897]: incorrect ext4 checksum on /dev/loop0
[  123.908347][ T6048] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.621 (6048)
[  123.990794][ T6048] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  124.034976][ T6048] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  124.072182][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  124.072195][   T26] audit: type=1326 audit(1791882417.878:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6080 comm="syz.3.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079e2d9 code=0x7ffc0000
[  124.095767][ T6079] i2c i2c-0: new_device: Can't parse I2C address
[  124.105344][ T6048] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  124.159437][ T6048] BTRFS info (device loop5): use lzo compression, level 0
[  124.179671][ T6048] BTRFS info (device loop5): force clearing of disk cache
[  124.199900][   T26] audit: type=1326 audit(1791882417.908:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6080 comm="syz.3.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079e2d9 code=0x7ffc0000
[  124.238032][ T6048] BTRFS info (device loop5): turning on sync discard
[  124.250770][ T6048] BTRFS warning (device loop5): excessive commit interval 43283
[  124.294166][ T6048] BTRFS info (device loop5): enabling ssd optimizations
[  124.301160][ T6048] BTRFS info (device loop5): using spread ssd allocation scheme
[  124.326383][   T26] audit: type=1326 audit(1791882417.908:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6080 comm="syz.3.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079e2d9 code=0x7ffc0000
[  124.376947][ T6048] BTRFS info (device loop5): not using ssd optimizations
[  124.414286][ T6048] BTRFS info (device loop5): not using spread ssd allocation scheme
[  124.428146][   T26] audit: type=1326 audit(1791882417.928:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6080 comm="syz.3.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd31079e2d9 code=0x7ffc0000
[  124.463694][ T6048] BTRFS info (device loop5): using free space tree
[  124.550194][   T26] audit: type=1326 audit(1791882417.928:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6080 comm="syz.3.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079e2d9 code=0x7ffc0000
[  124.661469][   T26] audit: type=1326 audit(1791882417.928:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6080 comm="syz.3.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079e2d9 code=0x7ffc0000
[  124.686300][   T26] audit: type=1326 audit(1791882417.928:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6080 comm="syz.3.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079e2d9 code=0x7ffc0000
[  124.710275][    C0] vkms_vblank_simulate: vblank timer overrun
[  124.732197][   T26] audit: type=1326 audit(1791882417.928:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6080 comm="syz.3.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079e2d9 code=0x7ffc0000
[  124.756186][    C0] vkms_vblank_simulate: vblank timer overrun
[  124.763276][   T26] audit: type=1326 audit(1791882417.928:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6080 comm="syz.3.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fd31079e2d9 code=0x7ffc0000
[  124.787248][    C0] vkms_vblank_simulate: vblank timer overrun
[  124.794471][   T26] audit: type=1326 audit(1791882417.928:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6080 comm="syz.3.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31079e2d9 code=0x7ffc0000
[  124.863440][ T6048] BTRFS info (device loop5): rebuilding free space tree
[  125.268179][ T4962] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  125.292928][ T6135] set_capacity_and_notify: 3 callbacks suppressed
[  125.292943][ T6135] loop0: detected capacity change from 0 to 256
[  125.323816][ T6136] loop7: detected capacity change from 0 to 6
[  125.364077][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.370475][ T6139] loop6: detected capacity change from 0 to 7
[  125.373504][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  125.400892][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.403001][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  125.410113][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  125.419401][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.436356][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  125.459232][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.648'.
[  125.502894][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.512172][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  125.520037][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.529247][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  125.554418][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.563662][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  125.641140][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.650395][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  125.658316][ T6136] ldm_validate_partition_table(): Disk read failed.
[  125.671467][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.680699][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  125.733132][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.742435][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  125.747599][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  125.805819][ T6136] Dev loop7: unable to read RDB block 0
[  125.806111][ T4488] ldm_validate_partition_table(): Disk read failed.
[  125.834866][ T6136]  loop7: unable to read partition table
[  125.880846][ T6136] loop7: partition table beyond EOD, truncated
[  125.888997][ T4488] Dev loop6: unable to read RDB block 0
[  125.911772][ T6136] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CîjÌ–4FLQkÝÇ5) failed (rc=-5)
[  125.919346][ T4488]  loop6: unable to read partition table
[  125.962809][ T6155] loop5: detected capacity change from 0 to 512
[  125.985088][ T4488] loop6: partition table beyond EOD, truncated
[  126.031909][ T6139] ldm_validate_partition_table(): Disk read failed.
[  126.054101][ T6139] Dev loop6: unable to read RDB block 0
[  126.081922][ T6139]  loop6: unable to read partition table
[  126.100520][ T6139] loop6: partition table beyond EOD, truncated
[  126.126693][ T6139] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  126.206481][ T6143] ldm_validate_partition_table(): Disk read failed.
[  126.285800][ T6143] Dev loop6: unable to read RDB block 0
[  126.330626][ T6143]  loop6: unable to read partition table
[  126.367520][ T6143] loop6: partition table beyond EOD, truncated
[  126.414836][ T6143] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  127.205332][ T6213] loop2: detected capacity change from 0 to 128
[  127.260450][ T6213] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  127.451665][ T6178] loop5: detected capacity change from 0 to 32768
[  127.642091][ T6178] JBD2: Ignoring recovery information on journal
[  127.831097][ T6230] loop0: detected capacity change from 0 to 512
[  127.852693][ T4350] logitech-hidpp-device 0005:046D:B012.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  127.874717][ T6178] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  127.904221][ T6230] EXT4-fs: Ignoring removed nobh option
[  127.984095][ T6230] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  128.168399][ T6244] loop9: detected capacity change from 0 to 255852544
[  128.291056][ T6238] fido_id[6238]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  128.389690][ T6250] loop0: detected capacity change from 0 to 16
[  128.476232][ T6250] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  128.749100][ T6260] qfq: no options
[  128.950143][ T4962] ocfs2: Unmounting device (7,5) on (node local)
[  129.063184][ T6264] syz.3.682 (6264) used greatest stack depth: 20736 bytes left
[  129.219448][ T6281] loop4: detected capacity change from 0 to 256
[  129.313257][ T6281] FAT-fs (loop4): Directory bread(block 64) failed
[  129.332498][ T6281] FAT-fs (loop4): Directory bread(block 65) failed
[  129.339168][ T6281] FAT-fs (loop4): Directory bread(block 66) failed
[  129.408161][ T6281] FAT-fs (loop4): Directory bread(block 67) failed
[  129.438106][ T6281] FAT-fs (loop4): Directory bread(block 68) failed
[  129.484099][ T6281] FAT-fs (loop4): Directory bread(block 69) failed
[  129.490792][ T6281] FAT-fs (loop4): Directory bread(block 70) failed
[  129.537676][ T6281] FAT-fs (loop4): Directory bread(block 71) failed
[  129.571152][ T6281] FAT-fs (loop4): Directory bread(block 72) failed
[  129.620513][ T6281] FAT-fs (loop4): Directory bread(block 73) failed
[  130.270634][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  130.270649][   T26] audit: type=1800 audit(1791882424.068:908): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.2.690" name="file1" dev="loop2" ino=4 res=0 errno=0
[  130.324042][ T6317] rnbd_client L125: Can't parse path ip:127v0.0.1žµÖ×@: -22
[  130.422451][ T6296] set_capacity_and_notify: 1 callbacks suppressed
[  130.422466][ T6296] loop3: detected capacity change from 0 to 32768
[  130.544151][ T6296] JBD2: Ignoring recovery information on journal
[  130.689020][ T6296] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  130.693425][ T6329] loop2: detected capacity change from 0 to 512
[  130.816029][ T6329] FAT-fs (loop2): Directory bread(block 199916) failed
[  130.842674][ T6329] FAT-fs (loop2): Directory bread(block 199917) failed
[  130.878854][ T6329] FAT-fs (loop2): Directory bread(block 199918) failed
[  130.921486][ T6329] FAT-fs (loop2): Directory bread(block 199919) failed
[  130.970156][ T6329] FAT-fs (loop2): Directory bread(block 199920) failed
[  130.989474][ T6329] FAT-fs (loop2): Directory bread(block 199921) failed
[  130.996496][ T6329] FAT-fs (loop2): Directory bread(block 199922) failed
[  131.003993][ T6329] FAT-fs (loop2): Directory bread(block 199923) failed
[  131.016478][ T6329] FAT-fs (loop2): Directory bread(block 199916) failed
[  131.025937][ T6329] FAT-fs (loop2): Directory bread(block 199917) failed
[  131.283831][ T4278] ocfs2: Unmounting device (7,3) on (node local)
[  131.452261][ T6348] loop5: detected capacity change from 0 to 4096
[  131.517091][ T6348] EXT4-fs (loop5): Test dummy encryption mode enabled
[  131.567029][ T6348] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  131.747135][ T4962] EXT4-fs (loop5): unmounting filesystem.
[  131.768646][ T6339] loop4: detected capacity change from 0 to 32768
[  132.028327][ T6368] loop5: detected capacity change from 0 to 1024
[  132.181575][ T4496] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  132.195836][ T6368] hfsplus: bad catalog entry type
[  132.285960][ T6378] loop3: detected capacity change from 0 to 1024
[  132.394105][ T4496] usb 3-1: unable to get BOS descriptor or descriptor too short
[  132.442916][ T4496] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.481373][ T4496] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  132.511800][ T4496] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  132.565985][ T4496] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  132.578103][ T6384] loop4: detected capacity change from 0 to 128
[  132.589390][ T4496] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  132.610551][ T4496] usb 3-1: config 1 interface 1 has no altsetting 0
[  132.644539][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  132.650913][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  132.653655][ T4496] usb 3-1: string descriptor 0 read error: -22
[  132.696214][ T4336] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8)
[  132.709419][ T4496] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  132.732832][ T4336] FAT-fs (loop4): Filesystem has been set read-only
[  132.749852][ T4496] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.769484][ T4336] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522)
[  132.807596][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.726'.
[  133.096859][ T6398] loop4: detected capacity change from 0 to 512
[  133.201008][ T6398] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  133.254338][ T6398] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.423134][ T4319] logitech-hidpp-device 0005:046D:B012.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  133.444835][ T6408] loop3: detected capacity change from 0 to 512
[  133.480239][ T6408] EXT4-fs: Ignoring removed nobh option
[  133.516853][ T6408] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  133.572401][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  133.604974][ T4496] usb 3-1: 2:0: failed to get current value for ch 1 (-71)
[  133.726009][ T4496] usb 3-1: USB disconnect, device number 7
[  133.752423][ T6411] fido_id[6411]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  133.815413][ T6416] loop4: detected capacity change from 0 to 16
[  133.852763][ T6416] erofs: (device loop4): mounted with root inode @ nid 36.
[  133.884632][   T26] audit: type=1800 audit(1791882427.688:909): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.735" name="file1" dev="loop4" ino=86 res=0 errno=0
[  134.111435][ T4319] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  134.319471][ T4319] usb 4-1: Using ep0 maxpacket: 16
[  134.333736][ T4319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.392601][ T4319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.434753][ T4319] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  134.493323][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.522652][ T4319] usb 4-1: Product: syz
[  134.535865][ T4319] usb 4-1: Manufacturer: syz
[  134.553134][ T4319] usb 4-1: SerialNumber: syz
[  134.801541][ T4319] usb 4-1: 0:2 : does not exist
[  134.824494][ T4319] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  134.849091][ T6428] FAT-fs (loop0): Directory bread(block 64) failed
[  134.864166][ T6428] FAT-fs (loop0): Directory bread(block 65) failed
[  134.905940][ T4319] usb 4-1: USB disconnect, device number 4
[  134.919842][ T6428] FAT-fs (loop0): Directory bread(block 66) failed
[  134.964253][ T6428] FAT-fs (loop0): Directory bread(block 67) failed
[  134.966481][ T4899] udevd[4899]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.970868][ T6428] FAT-fs (loop0): Directory bread(block 68) failed
[  135.068205][ T6428] FAT-fs (loop0): Directory bread(block 69) failed
[  135.102337][ T6428] FAT-fs (loop0): Directory bread(block 70) failed
[  135.131577][ T6428] FAT-fs (loop0): Directory bread(block 71) failed
[  135.161605][ T6428] FAT-fs (loop0): Directory bread(block 72) failed
[  135.168180][ T6428] FAT-fs (loop0): Directory bread(block 73) failed
[  135.179105][ T6432] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.493795][ T4319] logitech-hidpp-device 0005:046D:B012.0006: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  135.532304][ T6439] set_capacity_and_notify: 3 callbacks suppressed
[  135.532319][ T6439] loop4: detected capacity change from 0 to 512
[  135.589169][ T6439] EXT4-fs: Ignoring removed nobh option
[  135.658166][ T6439] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  135.816977][ T6444] fido_id[6444]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  135.961597][ T6458] netlink: 20 bytes leftover after parsing attributes in process `syz.5.754'.
[  136.173937][ T6470] loop3: detected capacity change from 0 to 256
[  136.231039][ T6470] FAT-fs (loop3): Directory bread(block 64) failed
[  136.278384][ T6470] FAT-fs (loop3): Directory bread(block 65) failed
[  136.292053][ T6470] FAT-fs (loop3): Directory bread(block 66) failed
[  136.302082][ T6470] FAT-fs (loop3): Directory bread(block 67) failed
[  136.315161][ T6470] FAT-fs (loop3): Directory bread(block 68) failed
[  136.339447][ T6470] FAT-fs (loop3): Directory bread(block 69) failed
[  136.364799][ T6470] FAT-fs (loop3): Directory bread(block 70) failed
[  136.395383][ T6470] FAT-fs (loop3): Directory bread(block 71) failed
[  136.418305][ T6470] FAT-fs (loop3): Directory bread(block 72) failed
[  136.435202][ T6470] FAT-fs (loop3): Directory bread(block 73) failed
[  136.575004][ T6488] loop0: detected capacity change from 0 to 512
[  136.597165][ T6488] EXT4-fs: Ignoring removed nobh option
[  136.680948][ T6488] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.768: invalid indirect mapped block 256 (level 2)
[  136.755305][ T6488] EXT4-fs (loop0): 2 truncates cleaned up
[  136.784953][ T6488] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  136.900671][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  137.240760][   T26] audit: type=1807 audit(1791882431.038:910): action=appraise func=POLICY_CHECK res=1
[  137.256581][ T6514] ima: policy update completed
[  137.257004][ T6504] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [176]
[  137.268643][   T26] audit: type=1802 audit(1791882431.068:911): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=completed comm="syz.5.776" res=1 errno=0
[  137.273395][ T6504] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[  137.302495][ T6504] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  137.340069][ T6504] One or more global auth toks could not properly register; rc = [-22]
[  137.351739][ T6504] Error parsing options; rc = [-22]
[  138.515792][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.788'.
[  138.880041][ T6563] tun0: tun_chr_ioctl cmd 2147767519
[  139.367745][ T6590] loop3: detected capacity change from 0 to 512
[  139.447663][ T6590] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.805: missing EA_INODE flag
[  139.463748][ T6590] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.805: error while reading EA inode 2 err=-117
[  139.476708][ T6590] EXT4-fs (loop3): 1 orphan inode deleted
[  139.483257][ T6590] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  139.532455][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  139.552020][ T6600] loop2: detected capacity change from 0 to 512
[  139.567289][ T6600] EXT4-fs: Ignoring removed nobh option
[  139.627588][ T6600] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.809: invalid indirect mapped block 256 (level 2)
[  139.711714][ T6600] EXT4-fs (loop2): 2 truncates cleaned up
[  139.718935][ T6600] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  140.218184][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  140.309412][ T6614] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [172]
[  140.331815][ T6614] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[  140.366743][ T6614] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  140.409024][ T6614] One or more global auth toks could not properly register; rc = [-22]
[  140.426475][ T6614] Error parsing options; rc = [-22]
[  140.900576][ T6636] loop4: detected capacity change from 0 to 1024
[  140.912584][ T6636] EXT4-fs: Ignoring removed bh option
[  140.928826][ T6636] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  141.008047][ T6636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  141.126585][ T6643] loop2: detected capacity change from 0 to 256
[  141.157978][ T6645] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [230]
[  141.227244][ T6645] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[  141.260755][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  141.266650][ T6645] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  141.318459][ T6645] One or more global auth toks could not properly register; rc = [-22]
[  141.342865][ T6645] Error parsing options; rc = [-22]
[  141.481126][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.835'.
[  141.619122][ T6628] loop3: detected capacity change from 0 to 40427
[  141.675715][ T6628] F2FS-fs (loop3): invalid crc value
[  141.708851][ T6628] F2FS-fs (loop3): Found nat_bits in checkpoint
[  141.841969][ T6628] F2FS-fs (loop3): Start checkpoint disabled!
[  141.866861][ T6670] loop5: detected capacity change from 0 to 512
[  141.888392][ T6670] EXT4-fs: Ignoring removed orlov option
[  141.911869][ T6670] EXT4-fs: Ignoring removed mblk_io_submit option
[  141.936281][ T6670] EXT4-fs: Ignoring removed mblk_io_submit option
[  141.943078][ T6628] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  142.003869][ T6670] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.840: corrupted in-inode xattr
[  142.088460][ T6651] loop4: detected capacity change from 0 to 32768
[  142.109824][ T6670] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.840: couldn't read orphan inode 15 (err -117)
[  142.122841][ T6670] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  142.167700][ T4962] EXT4-fs (loop5): unmounting filesystem.
[  142.250979][ T6651] JBD2: Ignoring recovery information on journal
[  142.327843][   T65] kworker/u4:4: attempt to access beyond end of device
[  142.327843][   T65] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  142.456793][ T6651] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  142.730094][ T4272] ocfs2: Unmounting device (7,4) on (node local)
[  142.748789][ T6696] loop5: detected capacity change from 0 to 512
[  142.852427][ T6696] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  142.924401][ T6696] EXT4-fs (loop5): 1 truncate cleaned up
[  142.930093][ T6696] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  143.226939][ T4962] EXT4-fs (loop5): unmounting filesystem.
[  143.317710][ T6710] loop0: detected capacity change from 0 to 2048
[  143.367501][ T6710] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  143.460815][ T6710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.487262][   T26] audit: type=1400 audit(1791882437.288:912): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=6719 comm="syz.3.861" name="p" offset=92
[  143.945692][ T6734] rnbd_client L125: Can't parse path ip:: -22
[  144.018138][  T130] kernel write not supported for file /input/event0 (pid: 130 comm: kworker/0:2)
[  144.185499][ T6744] loop4: detected capacity change from 0 to 1024
[  144.191274][ T6746] loop5: detected capacity change from 0 to 256
[  144.273738][ T6746] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  144.348380][ T6746] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  144.760641][ T6769] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  144.961737][ T6779] cougar: G6 mapped to F18
[  145.078796][ T6784] pimreg0: tun_chr_ioctl cmd 1074025677
[  145.097341][ T6784] pimreg0: linktype set to 804
[  145.125846][ T6787] dyndbg: expected <4096 bytes into control
[  145.235363][ T6791] loop3: detected capacity change from 0 to 1024
[  145.601851][ T6803] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  145.759054][ T6810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.903'.
[  145.828099][ T6775] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  145.871504][ T6775] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  145.905355][ T6775] F2FS-fs (loop5): invalid crc value
[  145.944725][ T6775] F2FS-fs (loop5): Found nat_bits in checkpoint
[  145.974687][ T6818] set_capacity_and_notify: 2 callbacks suppressed
[  145.974701][ T6818] loop4: detected capacity change from 0 to 128
[  145.997254][ T6814] loop2: detected capacity change from 0 to 512
[  146.044128][ T4897] blk_print_req_error: 59 callbacks suppressed
[  146.044143][ T4897] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  146.146712][ T6814] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.908: bad orphan inode 11862016
[  146.163305][ T6814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  146.239997][ T6775] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  146.247801][ T6775] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  146.272078][ T6814] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.371655][ T6833] loop4: detected capacity change from 0 to 256
[  146.458853][ T6836] netlink: 'syz.0.913': attribute type 4 has an invalid length.
[  146.709541][ T6843] sock: sock_timestamping_bind_phc: sock not bind to device
[  146.797921][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  146.811203][   T34] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  146.854256][   T34] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  147.062909][ T6855] loop3: detected capacity change from 0 to 2048
[  147.091982][ T6855] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  147.137255][ T6855] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.391480][ T6148] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  147.533899][ T6873] loop3: detected capacity change from 0 to 128
[  147.571428][ T6148] usb 3-1: Using ep0 maxpacket: 32
[  147.578229][ T6148] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  147.579379][ T6873] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  147.587693][ T6148] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  147.607896][ T6148] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  147.632509][ T6873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.662273][ T6148] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  147.721418][ T6148] usb 3-1: config 0 interface 0 has no altsetting 0
[  147.762647][ T6148] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  147.787824][ T6148] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  147.797606][ T6148] usb 3-1: Product: syz
[  147.802076][ T6148] usb 3-1: Manufacturer: syz
[  147.807828][ T6148] usb 3-1: SerialNumber: syz
[  147.819048][ T6148] usb 3-1: config 0 descriptor??
[  147.855655][ T6148] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  147.883283][ T6886] loop0: detected capacity change from 0 to 512
[  147.891114][ T6148] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  147.896347][ T6886] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  147.976966][ T6886] EXT4-fs (loop0): 1 truncate cleaned up
[  148.011516][ T6886] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  148.031248][ T6886] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.935: Logical block already allocated
[  148.071478][ T6886] EXT4-fs (loop0): Remounting filesystem read-only
[  148.095712][ T6886] EXT4-fs error (device loop0): ext4_empty_dir:3138: inode #2: comm syz.0.935: invalid size
[  148.151963][ T6886] EXT4-fs (loop0): Remounting filesystem read-only
[  148.215582][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  148.228366][ T6861] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  148.230260][ T6148] usb 3-1: USB disconnect, device number 8
[  148.235801][    C0] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  148.265069][ T6148] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  148.453745][ T6902] loop0: detected capacity change from 0 to 512
[  148.603323][ T6902] EXT4-fs (loop0): 1 orphan inode deleted
[  148.609105][ T6902] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  148.624299][ T6902] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.631500][ T4336] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  148.696927][ T4336] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1
[  148.853195][ T6918] loop5: detected capacity change from 0 to 512
[  148.929799][ T6918] EXT4-fs error (device loop5): ext4_orphan_get:1435: comm syz.5.947: bad orphan inode 11862016
[  148.964774][ T6918] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  149.032476][ T6918] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.275958][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'.
[  149.304843][ T6935] tipc: Started in network mode
[  149.333503][ T4962] EXT4-fs (loop5): unmounting filesystem.
[  149.334185][ T6935] tipc: Node identity 7, cluster identity 4711
[  149.376064][ T6935] tipc: Node number set to 7
[  149.440140][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  149.710565][ T6949] loop4: detected capacity change from 0 to 512
[  149.762287][ T6949] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  150.007803][  T130] kernel read not supported for file /vcs (pid: 130 comm: kworker/0:2)
[  150.292523][ T6982] 8021q: adding VLAN 0 to HW filter on device bond1
[  150.535517][ T6996] netlink: 72 bytes leftover after parsing attributes in process `syz.3.982'.
[  150.557975][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.982'.
[  150.657916][ T7000] loop4: detected capacity change from 0 to 128
[  150.753928][ T6998] XFS (mtdblock0): Invalid superblock magic number
[  150.878811][ T7011] program syz.5.987 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  150.883036][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'.
[  151.341383][  T130] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  151.475579][ T7044] loop4: detected capacity change from 0 to 128
[  151.531430][  T130] usb 6-1: Using ep0 maxpacket: 16
[  151.539613][  T130] usb 6-1: unable to get BOS descriptor or descriptor too short
[  151.579529][  T130] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  151.622608][  T130] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  151.671786][  T130] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.680863][  T130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.742087][  T130] usb 6-1: Product: syz
[  151.746296][  T130] usb 6-1: Manufacturer: syz
[  151.750908][  T130] usb 6-1: SerialNumber: syz
[  151.792876][ T7053] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1007'.
[  151.821586][ T7053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1007'.
[  151.996478][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.025802][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.057367][  T130] cdc_ncm 6-1:1.0: bind() failure
[  152.081633][  T130] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  152.101393][  T130] cdc_ncm 6-1:1.1: bind() failure
[  152.131361][  T130] usb 6-1: USB disconnect, device number 3
[  152.165956][ T7046] loop3: detected capacity change from 0 to 32768
[  152.199913][ T7046] JBD2: Ignoring recovery information on journal
[  152.283185][ T7046] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  152.533258][ T4278] ocfs2: Unmounting device (7,3) on (node local)
[  152.671413][  T130] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  152.861529][  T130] usb 6-1: Using ep0 maxpacket: 16
[  152.903236][  T130] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  152.931489][  T130] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  152.949303][ T7058] loop2: detected capacity change from 0 to 40427
[  152.963766][  T130] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40
[  152.981519][  T130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.989533][  T130] usb 6-1: Product: syz
[  153.002305][ T7058] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  153.039833][ T7058] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  153.055878][  T130] usb 6-1: Manufacturer: syz
[  153.060504][  T130] usb 6-1: SerialNumber: syz
[  153.095552][ T7058] F2FS-fs (loop2): invalid crc value
[  153.121216][ T7058] F2FS-fs (loop2): Found nat_bits in checkpoint
[  153.221218][ T7058] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  153.238498][ T7058] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  153.318641][  T130] cdc_ncm 6-1:1.0: bind() failure
[  153.350371][  T130] usb 6-1: 1:1: cannot set freq 48000 to ep 0x3
[  153.466281][  T130] usb 6-1: USB disconnect, device number 4
[  153.619194][   T34] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  153.638069][   T34] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  153.675639][ T7076] loop0: detected capacity change from 0 to 40427
[  153.726700][ T7076] F2FS-fs (loop0): invalid crc value
[  153.763782][ T7076] F2FS-fs (loop0): Found nat_bits in checkpoint
[  153.941964][ T7076] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  153.963823][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1023'.
[  154.013023][ T7104] tipc: Started in network mode
[  154.018102][ T7104] tipc: Node identity 7, cluster identity 4711
[  154.047840][ T7104] tipc: Node number set to 7
[  154.124352][ T4271] syz-executor: attempt to access beyond end of device
[  154.124352][ T4271] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  154.284743][ T7111] ima: signed policy file (specified as an absolute pathname) required
[  154.344447][   T26] audit: type=1802 audit(1791882448.148:913): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=signed policy required comm="syz.4.1027" res=0 errno=0
[  154.364810][ T7110] ima: policy update failed
[  154.386003][ T7113] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12
[  154.414340][   T26] audit: type=1802 audit(1791882448.168:914): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.4.1027" res=0 errno=0
[  154.835524][ T7125] 8021q: adding VLAN 0 to HW filter on device bond1
[  154.894915][ T6150] kernel write not supported for file /input/mice (pid: 6150 comm: kworker/1:11)
[  154.895767][ T7130] loop2: detected capacity change from 0 to 2048
[  154.956006][ T7130] UDF-fs: bad mount option "partitionÿÿÿ00000000000000001" or missing value
[  155.086636][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1038'.
[  155.087593][ T4496] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  155.116443][ T7141] tipc: Started in network mode
[  155.126557][ T7141] tipc: Node identity 7, cluster identity 4711
[  155.151637][ T7141] tipc: Node number set to 7
[  155.311058][ T4496] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  155.336296][ T4496] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.359242][ T7148] loop3: detected capacity change from 0 to 8192
[  155.371403][ T4496] usb 5-1: Product: syz
[  155.375597][ T4496] usb 5-1: Manufacturer: syz
[  155.380648][ T4496] usb 5-1: SerialNumber: syz
[  155.415898][ T4496] usb 5-1: config 0 descriptor??
[  155.629007][ T4496] usb 5-1: ignoring: probably an ADSL modem
[  155.646214][ T7157] syz.2.1047 (7157) used greatest stack depth: 19920 bytes left
[  155.897835][ T7171] loop2: detected capacity change from 0 to 512
[  155.995375][ T7175] loop5: detected capacity change from 0 to 128
[  156.014168][ T6148] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  156.040550][ T4496] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  156.203076][ T6148] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  156.237388][ T6148] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  156.269296][ T6148] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  156.287095][ T6148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.295098][ T4496] usb 5-1: USB disconnect, device number 6
[  156.326016][ T6148] usb 4-1: Product: syz
[  156.330305][ T6148] usb 4-1: Manufacturer: syz
[  156.338889][ T6148] usb 4-1: SerialNumber: syz
[  156.353717][ T6148] usb 4-1: config 0 descriptor??
[  156.362387][ T7163] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  156.369983][ T7163] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  156.591794][ T7163] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  156.620014][ T7163] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  156.986835][ T7202] input: syz0 as /devices/virtual/input/input14
[  157.056647][ T6148] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  157.186482][ T7208] loop2: detected capacity change from 0 to 128
[  157.259033][ T6148] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  157.297655][ T6148] usb 4-1: USB disconnect, device number 5
[  157.350179][ T7196] loop5: detected capacity change from 0 to 32768
[  157.426233][ T7216] loop2: detected capacity change from 0 to 128
[  157.428495][ T7196] XFS (loop5): Mounting V5 Filesystem
[  157.493860][ T7216] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  157.522346][ T7196] XFS (loop5): Ending clean mount
[  157.529313][ T7216] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  157.639143][ T4962] XFS (loop5): Unmounting Filesystem
[  157.709521][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  157.811568][ T4496] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  157.914556][ T7226] loop2: detected capacity change from 0 to 256
[  157.975147][ T7226] exfat: Deprecated parameter 'utf8'
[  158.013259][ T4496] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.016991][ T7226] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x82675e9d, utbl_chksum : 0xe619d30d)
[  158.033058][ T4496] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  158.097767][ T4496] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  158.126345][ T4496] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  158.152912][ T4496] usb 1-1: SerialNumber: syz
[  158.384108][ T4496] usb 1-1: 0:2 : does not exist
[  158.428367][ T4496] usb 1-1: USB disconnect, device number 5
[  158.553279][ T7242] loop3: detected capacity change from 0 to 8
[  158.560323][   T26] audit: type=1326 audit(1791882452.358:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7241 comm="syz.4.1079" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67f99e2d9 code=0x7ffc0000
[  158.585890][   T26] audit: type=1326 audit(1791882452.358:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7241 comm="syz.4.1079" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67f99e2d9 code=0x7ffc0000
[  158.682462][ T4897] udevd[4897]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  158.689938][   T26] audit: type=1326 audit(1791882452.368:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7241 comm="syz.4.1079" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fb67f99e2d9 code=0x7ffc0000
[  158.736541][   T26] audit: type=1326 audit(1791882452.368:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7241 comm="syz.4.1079" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67f99e2d9 code=0x7ffc0000
[  158.840990][   T26] audit: type=1326 audit(1791882452.368:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7241 comm="syz.4.1079" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67f99e2d9 code=0x7ffc0000
[  158.921164][ T4496] smpboot: CPU 1 is now offline
[  158.989019][ T7251] program syz.3.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  159.094357][   T26] audit: type=1326 audit(1791882452.368:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7241 comm="syz.4.1079" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb67f99e2d9 code=0x7ffc0000
[  159.186282][ T7258] loop4: detected capacity change from 0 to 1024
[  159.238749][   T26] audit: type=1326 audit(1791882452.368:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7241 comm="syz.4.1079" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67f99e2d9 code=0x7ffc0000
[  159.273485][ T7258] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  159.400068][   T26] audit: type=1326 audit(1791882452.368:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7241 comm="syz.4.1079" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67f99e2d9 code=0x7ffc0000
[  159.455737][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  159.519411][   T26] audit: type=1326 audit(1791882452.368:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7241 comm="syz.4.1079" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fb67f99e2d9 code=0x7ffc0000
[  159.593752][   T26] audit: type=1326 audit(1791882452.368:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7241 comm="syz.4.1079" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67f99e2d9 code=0x7ffc0000
[  159.714156][   T26] audit: type=1326 audit(1791882452.368:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7241 comm="syz.4.1079" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67f99e2d9 code=0x7ffc0000
[  159.961417][ T4496] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  160.174413][ T4496] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  160.208633][ T4496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.254463][ T4496] usb 5-1: config 0 descriptor??
[  160.498802][ T7283] loop5: detected capacity change from 0 to 4096
[  160.541035][ T7277] loop0: detected capacity change from 0 to 32768
[  160.649680][ T7277] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  160.681279][ T7283] ntfs: volume version 3.1.
[  160.692456][ T4496] [drm:udl_init] *ERROR* Selecting channel failed
[  160.794412][ T4496] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  160.848259][ T4496] [drm] Initialized udl on minor 2
[  160.899446][ T4496] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  160.939689][ T4496] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  160.977755][ T7277] syz.0.1095 (7277) used greatest stack depth: 18624 bytes left
[  160.989202][ T4496] usb 5-1: USB disconnect, device number 7
[  161.023265][  T130] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  161.049422][  T130] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  161.070981][  T130] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  161.151539][ T4314] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  161.164877][ T4271] ocfs2: Unmounting device (7,0) on (node local)
[  161.364632][ T4314] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  161.417454][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.449103][ T4314] usb 4-1: config 0 descriptor??
[  161.480297][ T4314] cp210x 4-1:0.0: cp210x converter detected
[  161.885445][ T4314] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  161.915847][   T26] audit: type=1326 audit(1791882455.718:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7313 comm="syz.5.1112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9079e2d9 code=0x7ffc0000
[  161.966924][ T4314] usb 4-1: cp210x converter now attached to ttyUSB0
[  162.084242][ T7318] loop4: detected capacity change from 0 to 256
[  162.090921][   T26] audit: type=1326 audit(1791882455.758:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7313 comm="syz.5.1112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9079e2d9 code=0x7ffc0000
[  162.161113][ T4496] usb 4-1: USB disconnect, device number 6
[  162.218030][ T4496] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  162.298426][ T4496] cp210x 4-1:0.0: device disconnected
[  162.307672][   T26] audit: type=1326 audit(1791882455.758:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7313 comm="syz.5.1112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9079e2d9 code=0x7ffc0000
[  162.470073][   T26] audit: type=1326 audit(1791882455.788:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7313 comm="syz.5.1112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a9079e2d9 code=0x7ffc0000
[  162.585683][   T26] audit: type=1326 audit(1791882455.788:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7313 comm="syz.5.1112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9079e2d9 code=0x7ffc0000
[  162.666296][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'.
[  162.701594][   T26] audit: type=1326 audit(1791882455.788:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7313 comm="syz.5.1112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9079e2d9 code=0x7ffc0000
[  162.738463][ T7336] IPVS: Error joining to the multicast group
[  162.763584][ T7333] loop5: detected capacity change from 0 to 4096
[  162.772045][ T4314] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  162.858102][ T7333] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  162.957307][ T7341] loop4: detected capacity change from 0 to 164
[  162.996066][ T4314] usb 3-1: unable to get BOS descriptor or descriptor too short
[  163.037584][ T4314] usb 3-1: config 129 has an invalid interface number: 135 but max is 0
[  163.117522][ T4314] usb 3-1: config 129 has an invalid interface number: 5 but max is 0
[  163.179746][ T4314] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  163.223389][ T4314] usb 3-1: config 129 has no interface number 0
[  163.240616][ T4314] usb 3-1: config 129 has no interface number 1
[  163.269638][ T4314] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  163.303906][ T4314] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  163.315873][ T4314] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  163.332570][ T4314] usb 3-1: config 129 interface 135 has no altsetting 0
[  163.339567][ T4314] usb 3-1: config 129 interface 5 has no altsetting 0
[  163.358881][ T4314] usb 3-1: string descriptor 0 read error: -22
[  163.373280][ T4314] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  163.385303][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.438383][ T4314] usb 3-1: MIDIStreaming interface descriptor not found
[  163.726486][ T4314] usb 3-1: USB disconnect, device number 9
[  163.864557][ T7348] loop4: detected capacity change from 0 to 40427
[  163.880062][ T7348] F2FS-fs (loop4): invalid crc value
[  163.903292][ T7348] F2FS-fs (loop4): Found nat_bits in checkpoint
[  163.973247][ T7348] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  164.035969][ T4272] syz-executor: attempt to access beyond end of device
[  164.035969][ T4272] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  164.449302][ T7364] netlink: 'syz.5.1130': attribute type 12 has an invalid length.
[  164.461486][ T7366] vivid-001: disconnect
[  164.501263][ T7358] vivid-001: reconnect
[  164.532659][ T7364] netlink: 'syz.5.1130': attribute type 29 has an invalid length.
[  164.607162][ T7364] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1130'.
[  164.683697][ T7364] netlink: 'syz.5.1130': attribute type 3 has an invalid length.
[  164.756104][ T7364] netlink: 'syz.5.1130': attribute type 2 has an invalid length.
[  164.818412][ T7364] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1130'.
[  165.020206][ T7381] program syz.4.1140 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  165.484937][ T4496] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  165.650075][ T7405] loop0: detected capacity change from 0 to 512
[  165.698400][ T7405] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  165.724824][ T4496] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  165.765845][ T4496] usb 4-1: config 0 has no interface number 0
[  165.795750][ T4496] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  165.854971][ T4496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.903644][ T4496] usb 4-1: Product: syz
[  165.934008][ T4496] usb 4-1: Manufacturer: syz
[  165.959273][ T4496] usb 4-1: SerialNumber: syz
[  165.992500][ T4496] usb 4-1: config 0 descriptor??
[  166.205935][ T4496] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  166.269224][ T4496] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  166.317409][ T4496] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  166.359162][ T4496] usb 4-1: media controller created
[  166.435841][ T4496] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  166.565510][ T4496] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  166.692157][ T4496] usb 4-1: USB disconnect, device number 7
[  166.750107][ T7427] bcache: register_bcache() error : failed to open device
[  167.481454][ T4496] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  167.703008][ T4496] usb 3-1: Using ep0 maxpacket: 16
[  167.728131][ T4496] usb 3-1: config 221 has an invalid interface number: 108 but max is 0
[  167.777030][ T4496] usb 3-1: config 221 has no interface number 0
[  167.817398][ T4496] usb 3-1: config 221 interface 108 altsetting 85 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  167.903067][ T4496] usb 3-1: config 221 interface 108 altsetting 85 has a duplicate endpoint with address 0x6, skipping
[  167.960222][ T7440] loop4: detected capacity change from 0 to 32768
[  167.989886][ T4496] usb 3-1: config 221 interface 108 has no altsetting 0
[  168.005101][ T7432] loop5: detected capacity change from 0 to 32768
[  168.049504][ T4496] usb 3-1: New USB device found, idVendor=1e2d, idProduct=0085, bcdDevice=d1.90
[  168.115172][ T4496] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.167178][ T7432] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  168.193895][ T4496] usb 3-1: Product: syz
[  168.219788][ T4496] usb 3-1: Manufacturer: syz
[  168.244097][ T4496] usb 3-1: SerialNumber: syz
[  168.505520][ T4496] option 3-1:221.108: GSM modem (1-port) converter detected
[  168.542097][ T4497] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  168.577274][ T4496] usb 3-1: USB disconnect, device number 10
[  168.609591][ T4496] option 3-1:221.108: device disconnected
[  168.713329][ T4962] ocfs2: Unmounting device (7,5) on (node local)
[  168.784875][ T4497] usb 1-1: config 0 has no interfaces?
[  168.822655][ T4497] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  168.875026][ T4497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.934058][ T4497] usb 1-1: Product: syz
[  168.941522][ T4497] usb 1-1: Manufacturer: syz
[  168.946113][ T4497] usb 1-1: SerialNumber: syz
[  169.005131][ T7480] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1177'.
[  169.024661][ T4497] usb 1-1: config 0 descriptor??
[  169.166403][ T7484] loop4: detected capacity change from 0 to 256
[  169.225842][ T7484] exfat: Deprecated parameter 'utf8'
[  169.267902][ T7461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.287555][ T7484] exfat: Deprecated parameter 'namecase'
[  169.334779][ T7484] exfat: Deprecated parameter 'namecase'
[  169.346831][ T7461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.403149][ T7484] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  169.422303][ T4496] usb 1-1: USB disconnect, device number 6
[  169.803875][ T7507] i2c i2c-0: Invalid 7-bit I2C address 0x00
[  169.994213][ T4496] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  170.226757][ T4496] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.265113][ T7526] loop3: detected capacity change from 0 to 64
[  170.277493][ T4496] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[  170.297199][ T4284] Bluetooth: unknown link type 85
[  170.339149][ T7528] loop4: detected capacity change from 0 to 512
[  170.357591][ T4496] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.408143][ T7528] EXT4-fs (loop4): bad s_min_extra_isize: 65535
[  170.438672][ T4496] idmouse 1-1:1.0: Unable to find bulk-in endpoint.
[  170.519791][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1194'.
[  170.670798][ T4496] usb 1-1: USB disconnect, device number 7
[  170.731832][ T7509] loop2: detected capacity change from 0 to 32768
[  170.834747][ T7509] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  170.910857][ T7541] loop5: detected capacity change from 0 to 512
[  170.996475][ T7541] EXT4-fs: Ignoring removed i_version option
[  171.080818][ T7541] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  171.131252][ T4281] ocfs2: Unmounting device (7,2) on (node local)
[  171.160932][ T7541] EXT4-fs (loop5): orphan cleanup on readonly fs
[  171.245799][ T7541] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  171.404608][ T7541] __quota_error: 12 callbacks suppressed
[  171.404621][ T7541] Quota error (device loop5): write_blk: dquota write failed
[  171.524184][ T7541] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5
[  171.592098][ T7541] Quota error (device loop5): write_blk: dquota write failed
[  171.644697][ T7541] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  171.728986][ T7541] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1196: Failed to acquire dquot type 1
[  171.814472][ T7541] EXT4-fs (loop5): 1 truncate cleaned up
[  171.879043][ T7541] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  171.891141][ T7560] program syz.3.1204 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  171.904991][ T7562] loop4: detected capacity change from 0 to 8
[  171.935051][ T7562] SQUASHFS error: lzo decompression failed, data probably corrupt
[  171.985833][ T7562] SQUASHFS error: Failed to read block 0x82: -5
[  172.014053][ T7562] SQUASHFS error: Unable to read metadata cache entry [80]
[  172.031516][ T4496] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  172.044917][ T7541] ieee802154 phy0 wpan0: encryption failed: -22
[  172.059545][ T7550] loop0: detected capacity change from 0 to 32768
[  172.070249][ T7562] SQUASHFS error: Unable to read inode 0x11f
[  172.155165][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'.
[  172.176035][ T7550] XFS (loop0): Mounting V5 Filesystem
[  172.207312][ T4962] EXT4-fs (loop5): unmounting filesystem.
[  172.247551][ T7550] XFS (loop0): Ending clean mount
[  172.253958][ T4496] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  172.295820][ T4496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.311622][ T4284] Bluetooth: hci1: command 0x0409 tx timeout
[  172.371287][ T4496] usb 3-1: config 0 descriptor??
[  172.420472][ T4496] cp210x 3-1:0.0: cp210x converter detected
[  172.468033][ T7579] loop3: detected capacity change from 0 to 256
[  172.573894][ T7579] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  172.608860][ T7580] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  172.736033][ T4271] XFS (loop0): Unmounting Filesystem
[  172.768548][ T7580] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  172.884394][ T7580] ext2 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.939453][ T7587] tap0: tun_chr_ioctl cmd 1074025677
[  172.968317][ T7587] tap0: linktype set to 768
[  173.038238][ T4496] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  173.076547][ T4496] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  173.139148][ T4496] usb 3-1: cp210x converter now attached to ttyUSB0
[  173.186106][ T4496] usb 3-1: USB disconnect, device number 11
[  173.248259][ T4496] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  173.304694][ T4496] cp210x 3-1:0.0: device disconnected
[  173.447775][ T4962] EXT4-fs (loop5): unmounting filesystem.
[  174.589626][ T7611] set_capacity_and_notify: 1 callbacks suppressed
[  174.589638][ T7611] loop3: detected capacity change from 0 to 32768
[  174.694850][ T7611] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1221 (7611)
[  174.819156][ T7611] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  174.896096][ T7611] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  174.990197][ T7607] loop5: detected capacity change from 0 to 32768
[  175.000885][ T7611] BTRFS info (device loop3): use zlib compression, level 3
[  175.041702][ T7611] BTRFS info (device loop3): turning on sync discard
[  175.048422][ T7611] BTRFS info (device loop3): using free space tree
[  175.059422][ T7643] loop4: detected capacity change from 0 to 1024
[  175.168336][ T7643] hfsplus: invalid length 1280 has been corrected to 255
[  175.238967][ T7658] hfsplus: invalid length 1280 has been corrected to 255
[  175.320672][ T7611] BTRFS info (device loop3): enabling ssd optimizations
[  175.346982][ T7658] hfsplus: invalid length 1280 has been corrected to 255
[  175.400331][ T7658] hfsplus: invalid length 1280 has been corrected to 255
[  175.453591][ T7658] hfsplus: invalid length 1280 has been corrected to 255
[  175.530499][ T7658] hfsplus: walked past end of dir
[  175.611045][ T4278] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.919970][ T7640] loop2: detected capacity change from 0 to 32768
[  175.957953][ T7640] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1235 (7640)
[  176.124628][ T7640] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  176.205759][ T7640] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  176.265603][ T7640] BTRFS info (device loop2): use zlib compression, level 3
[  176.311231][ T7640] BTRFS info (device loop2): using free space tree
[  176.458321][ T7640] BTRFS info (device loop2): enabling ssd optimizations
[  176.855165][ T4281] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  176.928599][   T26] audit: type=1326 audit(1791882470.728:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=7714 comm="syz.4.1250" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb67f99e2d9 code=0x0
[  177.014179][ T7717] loop3: detected capacity change from 0 to 1024
[  177.409150][   T34] hfsplus: b-tree write err: -5, ino 3
[  177.509115][   T26] audit: type=1400 audit(1791882471.308:945): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=7725 comm="syz.0.1254" name="foo" offset=81
[  177.705503][ T7734] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1259'.
[  178.271110][ T7739] loop0: detected capacity change from 0 to 131072
[  178.280557][ T4284] Bluetooth: hci4: command 0x0405 tx timeout
[  178.298254][ T7739] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[  178.307722][ T7739] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  178.324982][ T7739] F2FS-fs (loop0): invalid crc value
[  178.352631][ T7739] F2FS-fs (loop0): Found nat_bits in checkpoint
[  178.386985][ T7739] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  178.394442][ T7739] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  178.834276][ T7755] loop2: detected capacity change from 0 to 164
[  178.974952][ T7755] iso9660: Corrupted directory entry in block 2 of inode 1792
[  179.387158][ T7773] loop4: detected capacity change from 0 to 2048
[  179.433998][ T7773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.521541][ T4314] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  179.529084][ T7675] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  179.735641][ T4314] usb 1-1: Using ep0 maxpacket: 16
[  179.742560][ T7675] usb 4-1: Using ep0 maxpacket: 8
[  179.756031][ T7675] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  179.767591][ T4314] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  179.820500][ T7675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.829399][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.888560][ T4314] usb 1-1: Product: syz
[  179.903955][ T7675] pvrusb2: Hardware description: Terratec Grabster AV400
[  179.938463][ T4314] usb 1-1: Manufacturer: syz
[  179.958733][ T4314] usb 1-1: SerialNumber: syz
[  179.965488][ T7675] pvrusb2: **********
[  179.969470][ T7675] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  180.009281][ T4314] usb 1-1: config 0 descriptor??
[  180.066778][ T7675] pvrusb2: Important functionality might not be entirely working.
[  180.105483][ T7675] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  180.167596][ T7675] pvrusb2: **********
[  180.215361][ T2313] pvrusb2: Invalid write control endpoint
[  180.289962][ T7792] loop2: detected capacity change from 0 to 64
[  180.399717][ T7768] pvrusb2: Invalid write control endpoint
[  180.447230][ T4496] usb 4-1: USB disconnect, device number 8
[  180.454751][ T4314] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  180.522588][ T4314] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  180.560533][ T4314] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  180.582107][ T2313] pvrusb2: Invalid write control endpoint
[  180.598690][ T2313] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  180.609367][ T4314] usb 1-1: media controller created
[  180.638798][ T4314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  180.647894][ T2313] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  180.660696][ T2313] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  180.683014][ T2313] pvrusb2: Device being rendered inoperable
[  180.697745][ T2313] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  180.705764][ T2313] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  180.743995][ T2313] pvrusb2: Attached sub-driver cx25840
[  180.760966][ T2313] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  180.776008][ T2313] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  181.221542][ T4314] zl10353_read_register: readreg error (reg=127, ret==0)
[  181.229130][ T4314] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  181.240889][ T4314] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  183.991518][ T4284] Bluetooth: hci1: command 0x0406 tx timeout
[  183.997556][ T4284] Bluetooth: hci0: command 0x0406 tx timeout
[  185.912168][ T4284] Bluetooth: hci3: command 0x0406 tx timeout
[  185.918184][ T4284] Bluetooth: hci2: command 0x0406 tx timeout
[  194.079257][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  194.085573][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  255.515514][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  255.522527][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  278.071432][ T4277] Bluetooth: hci4: command 0x0406 tx timeout
[  316.957498][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  316.964297][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  324.631748][   T27] INFO: task syz.0.1263:7766 blocked for more than 143 seconds.
[  324.639998][   T27]       Not tainted syzkaller #0
[  324.654952][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  324.666781][   T27] task:syz.0.1263      state:D stack:26256 pid:7766  ppid:4271   flags:0x00004004
[  324.682517][   T27] Call Trace:
[  324.686011][   T27]  <TASK>
[  324.688936][   T27]  __schedule+0x107f/0x4030
[  324.700981][   T27]  ? mark_lock+0x94/0x320
[  324.708256][   T27]  ? __lock_acquire+0x7ea0/0x7ea0
[  324.717909][   T27]  ? release_firmware_map_entry+0x187/0x187
[  324.726811][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  324.738067][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  324.747089][   T27]  schedule+0xb9/0x180
[  324.751160][   T27]  io_schedule+0x7c/0xd0
[  324.762573][   T27]  bit_wait_io+0xd/0xc0
[  324.766729][   T27]  __wait_on_bit+0x9b/0x2c0
[  324.771215][   T27]  ? bit_wait+0xc0/0xc0
[  324.781403][   T27]  out_of_line_wait_on_bit+0x138/0x190
[  324.786870][   T27]  ? bit_wait+0xc0/0xc0
[  324.791010][   T27]  ? __wait_on_bit+0x2c0/0x2c0
[  324.808082][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  324.818777][   T27]  ? bit_waitqueue+0x30/0x30
[  324.823494][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  324.828708][   T27]  do_get_write_access+0x605/0xf20
[  324.837911][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  324.845636][   T27]  __ext4_journal_get_write_access+0x24b/0x6e0
[  324.854569][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  324.860716][   T27]  ? rcu_is_watching+0x11/0xa0
[  324.866169][   T27]  ext4_reserve_inode_write+0x201/0x290
[  324.874496][   T27]  __ext4_mark_inode_dirty+0x161/0x7b0
[  324.879946][   T27]  ext4_dirty_inode+0xbf/0x100
[  324.884862][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  324.890657][   T27]  __mark_inode_dirty+0x2e7/0xe80
[  324.898565][   T27]  __file_update_time+0x21d/0x240
[  324.904518][   T27]  file_update_time+0x2f3/0x370
[  324.909393][   T27]  ? __file_remove_privs+0x5f0/0x5f0
[  324.917505][   T27]  ext4_page_mkwrite+0x1a9/0x10d0
[  324.922640][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  324.928864][   T27]  ? count_memcg_event_mm+0x8a/0x3c0
[  324.936961][   T27]  ? put_page+0x270/0x270
[  324.941280][   T27]  do_page_mkwrite+0x16b/0x5c0
[  324.948692][   T27]  handle_mm_fault+0x199c/0x3d40
[  324.958936][   T27]  ? mt_find+0x157/0x830
[  324.963319][   T27]  ? numa_migrate_prep+0x250/0x250
[  324.968422][   T27]  ? lock_chain_count+0x20/0x20
[  324.976309][   T27]  ? ktime_get+0x247/0x270
[  324.980718][   T27]  ? lock_mm_and_find_vma+0xae/0x2f0
[  324.986144][   T27]  do_user_addr_fault+0x58e/0xb20
[  324.991166][   T27]  exc_page_fault+0x60/0x100
[  324.998558][   T27]  ? clear_bhb_loop+0x60/0xb0
[  325.003332][   T27]  asm_exc_page_fault+0x22/0x30
[  325.008200][   T27] RIP: 0033:0x7fb5492730b2
[  325.016276][   T27] RSP: 002b:00007fff9db3bb50 EFLAGS: 00010202
[  325.022484][   T27] RAX: 0000000000004008 RBX: 00007fb54a155720 RCX: 0000000000000000
[  325.030438][   T27] RDX: 0000001b2fc20000 RSI: 0000000000000008 RDI: 00007fb54a155720
[  325.041668][   T27] RBP: 0000000000000156 R08: 00007fb549610000 R09: 00007fb549626038
[  325.050833][   T27] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff86816ceb
[  325.062914][   T27] R13: 00007fb549626038 R14: 0000000000000040 R15: ffffffffffffc000
[  325.070878][   T27]  ? dummy_queue+0x31b/0x910
[  325.077165][   T27]  </TASK>
[  325.080178][   T27] INFO: task syz.5.1285:7797 blocked for more than 143 seconds.
[  325.089637][   T27]       Not tainted syzkaller #0
[  325.095739][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.106105][   T27] task:syz.5.1285      state:D stack:27600 pid:7797  ppid:4962   flags:0x00004004
[  325.121152][   T27] Call Trace:
[  325.126982][   T27]  <TASK>
[  325.129904][   T27]  __schedule+0x107f/0x4030
[  325.135635][   T27]  ? mark_lock+0x94/0x320
[  325.139955][   T27]  ? __lock_acquire+0x7ea0/0x7ea0
[  325.146746][   T27]  ? release_firmware_map_entry+0x187/0x187
[  325.155019][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  325.160903][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  325.169253][   T27]  schedule+0xb9/0x180
[  325.174509][   T27]  io_schedule+0x7c/0xd0
[  325.178740][   T27]  bit_wait_io+0xd/0xc0
[  325.184622][   T27]  __wait_on_bit+0x9b/0x2c0
[  325.189135][   T27]  ? bit_wait+0xc0/0xc0
[  325.194839][   T27]  out_of_line_wait_on_bit+0x138/0x190
[  325.200286][   T27]  ? bit_wait+0xc0/0xc0
[  325.206220][   T27]  ? __wait_on_bit+0x2c0/0x2c0
[  325.210971][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  325.217242][   T27]  ? bit_waitqueue+0x30/0x30
[  325.223535][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  325.228719][   T27]  do_get_write_access+0x605/0xf20
[  325.235905][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  325.244094][   T27]  __ext4_journal_get_write_access+0x24b/0x6e0
[  325.252642][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  325.258788][   T27]  ? rcu_is_watching+0x11/0xa0
[  325.265304][   T27]  ext4_reserve_inode_write+0x201/0x290
[  325.270839][   T27]  __ext4_mark_inode_dirty+0x161/0x7b0
[  325.280145][   T27]  ext4_dirty_inode+0xbf/0x100
[  325.286636][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  325.293625][   T27]  __mark_inode_dirty+0x2e7/0xe80
[  325.298640][   T27]  __file_update_time+0x21d/0x240
[  325.305476][   T27]  file_update_time+0x2f3/0x370
[  325.310317][   T27]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  325.316827][   T27]  ? __file_remove_privs+0x5f0/0x5f0
[  325.323828][   T27]  ext4_page_mkwrite+0x1a9/0x10d0
[  325.328845][   T27]  ? pte_alloc_one+0x287/0x310
[  325.334803][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  325.341032][   T27]  do_page_mkwrite+0x16b/0x5c0
[  325.348404][   T27]  handle_mm_fault+0x199c/0x3d40
[  325.357318][   T27]  ? mt_find+0x157/0x830
[  325.363335][   T27]  ? numa_migrate_prep+0x250/0x250
[  325.368442][   T27]  ? lock_chain_count+0x20/0x20
[  325.374541][   T27]  ? lock_mm_and_find_vma+0xae/0x2f0
[  325.379817][   T27]  do_user_addr_fault+0x58e/0xb20
[  325.387941][   T27]  exc_page_fault+0x60/0x100
[  325.393721][   T27]  ? clear_bhb_loop+0x60/0xb0
[  325.398387][   T27]  asm_exc_page_fault+0x22/0x30
[  325.405000][   T27] RIP: 0033:0x7f3a9066bc23
[  325.409400][   T27] RSP: 002b:00007ffc8c29aca0 EFLAGS: 00010246
[  325.416843][   T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b31864000
[  325.426502][   T27] RDX: 0000001b31824000 RSI: 0000000000400000 RDI: 00007f3a909e2708
[  325.436292][   T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  325.445966][   T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  325.457232][   T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc8c29af30
[  325.467476][   T27]  </TASK>
[  325.470490][   T27] INFO: task syz.4.1286:7798 blocked for more than 144 seconds.
[  325.479324][   T27]       Not tainted syzkaller #0
[  325.485936][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.497060][   T27] task:syz.4.1286      state:D stack:27600 pid:7798  ppid:4272   flags:0x00004004
[  325.507979][   T27] Call Trace:
[  325.511244][   T27]  <TASK>
[  325.515402][   T27]  __schedule+0x107f/0x4030
[  325.520023][   T27]  ? mark_lock+0x94/0x320
[  325.526236][   T27]  ? __lock_acquire+0x7ea0/0x7ea0
[  325.531270][   T27]  ? release_firmware_map_entry+0x187/0x187
[  325.538396][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  325.545994][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  325.551185][   T27]  schedule+0xb9/0x180
[  325.556494][   T27]  io_schedule+0x7c/0xd0
[  325.564498][   T27]  bit_wait_io+0xd/0xc0
[  325.568673][   T27]  __wait_on_bit+0x9b/0x2c0
[  325.574955][   T27]  ? bit_wait+0xc0/0xc0
[  325.579105][   T27]  out_of_line_wait_on_bit+0x138/0x190
[  325.586342][   T27]  ? bit_wait+0xc0/0xc0
[  325.590486][   T27]  ? __wait_on_bit+0x2c0/0x2c0
[  325.596466][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  325.604538][   T27]  ? bit_waitqueue+0x30/0x30
[  325.609123][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  325.615527][   T27]  do_get_write_access+0x605/0xf20
[  325.620634][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  325.628349][   T27]  __ext4_journal_get_write_access+0x24b/0x6e0
[  325.635846][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  325.643689][   T27]  ? rcu_is_watching+0x11/0xa0
[  325.648444][   T27]  ext4_reserve_inode_write+0x201/0x290
[  325.655204][   T27]  __ext4_mark_inode_dirty+0x161/0x7b0
[  325.663541][   T27]  ext4_dirty_inode+0xbf/0x100
[  325.668298][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  325.676301][   T27]  __mark_inode_dirty+0x2e7/0xe80
[  325.683058][   T27]  __file_update_time+0x21d/0x240
[  325.688071][   T27]  file_update_time+0x2f3/0x370
[  325.694125][   T27]  ? __file_remove_privs+0x5f0/0x5f0
[  325.699427][   T27]  ext4_page_mkwrite+0x1a9/0x10d0
[  325.706427][   T27]  ? pte_alloc_one+0x287/0x310
[  325.711192][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  325.719964][   T27]  do_page_mkwrite+0x16b/0x5c0
[  325.726881][   T27]  handle_mm_fault+0x199c/0x3d40
[  325.733056][   T27]  ? mt_find+0x157/0x830
[  325.737306][   T27]  ? numa_migrate_prep+0x250/0x250
[  325.744258][   T27]  ? lock_chain_count+0x20/0x20
[  325.749104][   T27]  ? lock_mm_and_find_vma+0xae/0x2f0
[  325.755905][   T27]  do_user_addr_fault+0x58e/0xb20
[  325.760937][   T27]  exc_page_fault+0x60/0x100
[  325.768612][   T27]  ? clear_bhb_loop+0x60/0xb0
[  325.774528][   T27]  asm_exc_page_fault+0x22/0x30
[  325.779367][   T27] RIP: 0033:0x7fb67f86bc23
[  325.786364][   T27] RSP: 002b:00007ffe9610f970 EFLAGS: 00010246
[  325.793646][   T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2fa64000
[  325.803354][   T27] RDX: 0000001b2fa24000 RSI: 0000000000400000 RDI: 00007fb67fbe2708
[  325.812511][   T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  325.820474][   T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  325.832926][   T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe9610fc00
[  325.840900][   T27]  </TASK>
[  325.845540][   T27] INFO: task syz.2.1287:7799 blocked for more than 144 seconds.
[  325.855038][   T27]       Not tainted syzkaller #0
[  325.859956][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.871043][   T27] task:syz.2.1287      state:D stack:27600 pid:7799  ppid:4281   flags:0x00004004
[  325.883059][   T27] Call Trace:
[  325.886329][   T27]  <TASK>
[  325.889244][   T27]  __schedule+0x107f/0x4030
[  325.895383][   T27]  ? mark_lock+0x94/0x320
[  325.899710][   T27]  ? __lock_acquire+0x7ea0/0x7ea0
[  325.907024][   T27]  ? release_firmware_map_entry+0x187/0x187
[  325.914122][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  325.920009][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  325.927464][   T27]  schedule+0xb9/0x180
[  325.933598][   T27]  io_schedule+0x7c/0xd0
[  325.937834][   T27]  bit_wait_io+0xd/0xc0
[  325.944640][   T27]  __wait_on_bit+0x9b/0x2c0
[  325.949132][   T27]  ? bit_wait+0xc0/0xc0
[  325.953978][   T27]  out_of_line_wait_on_bit+0x138/0x190
[  325.959429][   T27]  ? bit_wait+0xc0/0xc0
[  325.965921][   T27]  ? __wait_on_bit+0x2c0/0x2c0
[  325.972546][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  325.977563][   T27]  ? bit_waitqueue+0x30/0x30
[  325.984408][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  325.989597][   T27]  do_get_write_access+0x605/0xf20
[  325.997400][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  326.006480][   T27]  __ext4_journal_get_write_access+0x24b/0x6e0
[  326.013358][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  326.019501][   T27]  ? rcu_is_watching+0x11/0xa0
[  326.026524][   T27]  ext4_reserve_inode_write+0x201/0x290
[  326.032735][   T27]  __ext4_mark_inode_dirty+0x161/0x7b0
[  326.038189][   T27]  ext4_dirty_inode+0xbf/0x100
[  326.046717][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  326.053572][   T27]  __mark_inode_dirty+0x2e7/0xe80
[  326.058595][   T27]  __file_update_time+0x21d/0x240
[  326.066032][   T27]  file_update_time+0x2f3/0x370
[  326.073315][   T27]  ? __file_remove_privs+0x5f0/0x5f0
[  326.078599][   T27]  ext4_page_mkwrite+0x1a9/0x10d0
[  326.085929][   T27]  ? pte_alloc_one+0x287/0x310
[  326.090687][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  326.097628][   T27]  do_page_mkwrite+0x16b/0x5c0
[  326.104647][   T27]  handle_mm_fault+0x199c/0x3d40
[  326.109572][   T27]  ? mt_find+0x157/0x830
[  326.115395][   T27]  ? numa_migrate_prep+0x250/0x250
[  326.120502][   T27]  ? lock_chain_count+0x20/0x20
[  326.127633][   T27]  ? lock_mm_and_find_vma+0xae/0x2f0
[  326.133576][   T27]  do_user_addr_fault+0x58e/0xb20
[  326.138596][   T27]  exc_page_fault+0x60/0x100
[  326.145459][   T27]  ? clear_bhb_loop+0x60/0xb0
[  326.150128][   T27]  asm_exc_page_fault+0x22/0x30
[  326.163557][   T27] RIP: 0033:0x7f9d8de6bc23
[  326.167966][   T27] RSP: 002b:00007fffa207a750 EFLAGS: 00010246
[  326.176641][   T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2f864000
[  326.186997][   T27] RDX: 0000001b2f824000 RSI: 0000000000400000 RDI: 00007f9d8e1e2708
[  326.195660][   T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  326.205871][   T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  326.214646][   T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffa207a9e0
[  326.225798][   T27]  </TASK>
[  326.228840][   T27] INFO: task syz.3.1288:7800 blocked for more than 144 seconds.
[  326.239250][   T27]       Not tainted syzkaller #0
[  326.246401][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  326.255712][   T27] task:syz.3.1288      state:D stack:27600 pid:7800  ppid:4278   flags:0x00004004
[  326.268640][   T27] Call Trace:
[  326.272579][   T27]  <TASK>
[  326.276660][   T27]  __schedule+0x107f/0x4030
[  326.281163][   T27]  ? mark_lock+0x94/0x320
[  326.288369][   T27]  ? __lock_acquire+0x7ea0/0x7ea0
[  326.294140][   T27]  ? release_firmware_map_entry+0x187/0x187
[  326.300022][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  326.308194][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  326.315150][   T27]  schedule+0xb9/0x180
[  326.319221][   T27]  io_schedule+0x7c/0xd0
[  326.325739][   T27]  bit_wait_io+0xd/0xc0
[  326.329887][   T27]  __wait_on_bit+0x9b/0x2c0
[  326.335964][   T27]  ? bit_wait+0xc0/0xc0
[  326.340114][   T27]  out_of_line_wait_on_bit+0x138/0x190
[  326.347839][   T27]  ? bit_wait+0xc0/0xc0
[  326.352656][   T27]  ? __wait_on_bit+0x2c0/0x2c0
[  326.357404][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  326.364683][   T27]  ? bit_waitqueue+0x30/0x30
[  326.369268][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  326.377759][   T27]  do_get_write_access+0x605/0xf20
[  326.385108][   T27]  jbd2_journal_get_write_access+0x108/0x140
[  326.391078][   T27]  __ext4_journal_get_write_access+0x24b/0x6e0
[  326.398927][   T27]  ? __ext4_journal_ensure_credits+0x450/0x450
[  326.407411][   T27]  ? rcu_is_watching+0x11/0xa0
[  326.412831][   T27]  ext4_reserve_inode_write+0x201/0x290
[  326.418366][   T27]  __ext4_mark_inode_dirty+0x161/0x7b0
[  326.426066][   T27]  ext4_dirty_inode+0xbf/0x100
[  326.430815][   T27]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  326.437302][   T27]  __mark_inode_dirty+0x2e7/0xe80
[  326.445499][   T27]  __file_update_time+0x21d/0x240
[  326.450521][   T27]  file_update_time+0x2f3/0x370
[  326.456564][   T27]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  326.464077][   T27]  ? __file_remove_privs+0x5f0/0x5f0
[  326.469357][   T27]  ext4_page_mkwrite+0x1a9/0x10d0
[  326.475726][   T27]  ? pte_alloc_one+0x287/0x310
[  326.485363][   T27]  ? ext4_change_inode_journal_flag+0x710/0x710
[  326.492291][   T27]  do_page_mkwrite+0x16b/0x5c0
[  326.497045][   T27]  handle_mm_fault+0x199c/0x3d40
[  326.504342][   T27]  ? mt_find+0x157/0x830
[  326.508583][   T27]  ? numa_migrate_prep+0x250/0x250
[  326.514480][   T27]  ? lock_chain_count+0x20/0x20
[  326.519438][   T27]  ? lock_mm_and_find_vma+0xae/0x2f0
[  326.527000][   T27]  do_user_addr_fault+0x58e/0xb20
[  326.532781][   T27]  exc_page_fault+0x60/0x100
[  326.537366][   T27]  ? clear_bhb_loop+0x60/0xb0
[  326.544336][   T27]  asm_exc_page_fault+0x22/0x30
[  326.549200][   T27] RIP: 0033:0x7fd31066bc23
[  326.556045][   T27] RSP: 002b:00007fff6d9ea8c0 EFLAGS: 00010246
[  326.564739][   T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2f964000
[  326.573371][   T27] RDX: 0000001b2f924000 RSI: 0000000000400000 RDI: 00007fd3109e2708
[  326.584773][   T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  326.594805][   T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  326.605022][   T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff6d9eab50
[  326.613695][   T27]  </TASK>
[  326.616717][   T27] 
[  326.616717][   T27] Showing all locks held in the system:
[  326.626798][   T27] 1 lock held by rcu_tasks_kthre/12:
[  326.632875][   T27]  #0: ffffffff8d92e230 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  326.645548][   T27] 1 lock held by rcu_tasks_trace/13:
[  326.650814][   T27]  #0: ffffffff8d92ea50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  326.665571][   T27] 1 lock held by khungtaskd/27:
[  326.670407][   T27]  #0: ffffffff8d92d8a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  326.680395][   T27] 4 locks held by kworker/u4:2/34:
[  326.689811][   T27]  #0: ffff888019af7938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  326.700604][   T27]  #1: ffffc90000ab7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  326.716782][   T27]  #2: ffff88814d3080e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0
[  326.727081][   T27]  #3: ffff88814d30ac18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70
[  326.740543][   T27] 2 locks held by getty/4032:
[  326.745382][   T27]  #0: ffff88814ceea098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  326.757922][   T27]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[  326.768149][   T27] 3 locks held by syz-executor/4259:
[  326.777119][   T27]  #0: ffff88807eb09058 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  326.788414][   T27]  #1: ffff88814d308558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  326.800939][   T27]  #2: ffff88814d30c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  326.810736][   T27] 3 locks held by syz.0.1263/7766:
[  326.818613][   T27]  #0: ffff88801846ae58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  326.830101][   T27]  #1: ffff88814d308558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  326.843133][   T27]  #2: ffff88814d30c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  326.853457][   T27] 3 locks held by syz.5.1285/7797:
[  326.858547][   T27]  #0: ffff88801cfad3d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  326.870735][   T27]  #1: ffff88814d308558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  326.884623][   T27]  #2: ffff88814d30c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  326.895627][   T27] 3 locks held by syz.4.1286/7798:
[  326.900724][   T27]  #0: ffff88802bdb2e58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  326.913475][   T27]  #1: ffff88814d308558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  326.923336][   T27]  #2: ffff88814d30c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  326.937322][   T27] 3 locks held by syz.2.1287/7799:
[  326.942923][   T27]  #0: ffff88802bdb1058 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  326.955701][   T27]  #1: ffff88814d308558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  326.965545][   T27]  #2: ffff88814d30c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  326.977965][   T27] 3 locks held by syz.3.1288/7800:
[  326.983202][   T27]  #0: ffff88802bdb4c58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  326.997903][   T27]  #1: ffff88814d308558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  327.007787][   T27]  #2: ffff88814d30c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  327.020180][   T27] 
[  327.022609][   T27] =============================================
[  327.022609][   T27] 
[  327.031007][   T27] NMI backtrace for cpu 0
[  327.035317][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  327.042486][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  327.052518][   T27] Call Trace:
[  327.055775][   T27]  <TASK>
[  327.058688][   T27]  dump_stack_lvl+0x188/0x24e
[  327.063368][   T27]  ? irq_work_queue+0xbf/0x140
[  327.068116][   T27]  ? show_regs_print_info+0x12/0x12
[  327.073291][   T27]  ? load_image+0x410/0x410
[  327.077770][   T27]  ? vprintk_emit+0x59f/0x6a0
[  327.082430][   T27]  ? printk_sprint+0x460/0x460
[  327.087196][   T27]  nmi_cpu_backtrace+0x3e6/0x460
[  327.092119][   T27]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  327.098248][   T27]  ? _printk+0xda/0x130
[  327.102382][   T27]  ? load_image+0x410/0x410
[  327.106861][   T27]  ? load_image+0x410/0x410
[  327.111353][   T27]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  327.117402][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  327.123447][   T27]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  327.129407][   T27]  watchdog+0xf0e/0xf50
[  327.133562][   T27]  ? watchdog+0x1ed/0xf50
[  327.137872][   T27]  kthread+0x29d/0x330
[  327.141916][   T27]  ? hungtask_pm_notify+0x40/0x40
[  327.146916][   T27]  ? kthread_blkcg+0xd0/0xd0
[  327.151484][   T27]  ret_from_fork+0x1f/0x30
[  327.155885][   T27]  </TASK>
[  327.169625][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  327.176463][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  327.183634][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  327.193663][   T27] Call Trace:
[  327.196917][   T27]  <TASK>
[  327.199848][   T27]  dump_stack_lvl+0x188/0x24e
[  327.204506][   T27]  ? memcpy+0x3c/0x60
[  327.208468][   T27]  ? show_regs_print_info+0x12/0x12
[  327.213641][   T27]  ? load_image+0x410/0x410
[  327.218139][   T27]  panic+0x2d3/0x710
[  327.222018][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  327.227632][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  327.232113][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  327.237640][   T27]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  327.243770][   T27]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  327.249899][   T27]  watchdog+0xf4d/0xf50
[  327.254034][   T27]  ? watchdog+0x1ed/0xf50
[  327.258345][   T27]  kthread+0x29d/0x330
[  327.262390][   T27]  ? hungtask_pm_notify+0x40/0x40
[  327.267388][   T27]  ? kthread_blkcg+0xd0/0xd0
[  327.271952][   T27]  ret_from_fork+0x1f/0x30
[  327.276355][   T27]  </TASK>
[  327.279422][   T27] Kernel Offset: disabled
[  327.283727][   T27] Rebooting in 86400 seconds..