last executing test programs:

5m28.020120308s ago: executing program 2 (id=2948):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x403a}}}, {0x20, 0x2, @in6={0xa, 0x40, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x4048000)

5m27.666956901s ago: executing program 2 (id=2954):
r0 = socket(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x30, 0x0, 0x40, 0xfffff008}, {0x6, 0x0, 0x8, 0x5}]}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)

5m27.366458122s ago: executing program 2 (id=2959):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

5m27.014781212s ago: executing program 2 (id=2960):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3004001, &(0x7f0000000180)={[{@showassoc}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@showassoc}, {@map_acorn}, {@overriderock}, {@session={'session', 0x3d, 0x62}}, {@cruft}, {@map_normal}, {}, {@map_acorn}, {@cruft}, {@nocompress}, {}, {@map_off}]}, 0xfe, 0xa43, &(0x7f0000000cc0)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))

5m26.349069352s ago: executing program 2 (id=2965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x15}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0)

5m25.36482022s ago: executing program 2 (id=2972):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)

5m24.784453308s ago: executing program 32 (id=2972):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)

5m0.258092034s ago: executing program 0 (id=3153):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0xb, 0x0, 0x4, 0x8, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m0.021720891s ago: executing program 0 (id=3156):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x9, 0x5, 0x2, 0x40004}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x52, 0x1, 0xfffffffc, 0x0, {0x2}, [@typed={0x8, 0x89, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}}, 0x0)

4m59.789499373s ago: executing program 0 (id=3159):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00010027bd704003dcdf2502202001000000000020000006001c004e22000005001b00110a0000080019"], 0x34}}, 0x40050)

4m59.453927946s ago: executing program 0 (id=3165):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303235342c6c6f6e6761642c756d61736b3d30303030303030303030303030303030303137373737372c646d6f64653d30303030303030303030303030303030303030303430302c756e686964652c73686f727461642c616e63686f723d30303030303030303030303030303030303030372c6e6f7374726963742c696f636861727365743d6b6f69382d72752c00263468691e626cd4f6d91d6fed4bb42a4515346a98d55253771fadd9bb31ceaa8d7647a551ee49f3b17bfc6ae1090b228307b8fdc1935c7e8cbbf9aea203bd"], 0x1, 0xc65, &(0x7f0000000940)="$eJzs3U9sHNd5APDvjbjiUm4rJnYUJ42LTVuksmK5+hdRsQp3VdNsA8iyEIq5BeBKpNSFKZIgqUY20oJpDz30EKAoesiJQGsUSNHAaIqglwJM6wLJxYfCp56IFjaCoge2CJBTwGBm34pLirRpiZQo6/ezyW929nuz781bztAGv30BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83ssXTpxMD7sXAMCDdGn0qydOuf8DwGPliv/+BwAAAAAAAAAAAACA/S5FEU9GitlLq2m8etxRv9iu3bo9NjyydbOBVLU8UOWXX/WTp06f+dLZoXPdeLE9/QHtd9tn49XRKxcaL83cnJ2bnJ+fnGiMTbevzUxM7vgI99t+s2PVCWjcfO3WxPXr841Tz5/e8PTtwff7nzgyeH7o2ePPdHPHhkdGRtdT6r35fffckY7tKjwORhHHI8Vz3/tJakVEEfd/LuoPdu43G6gGcawaxNjwSDWQqXZreqF88nL3RBQRjZ5Gze452nouoq/2QMewvWbEYtn9ssPHyuGNzrbmWlenJhuXW3ML7YX2zPTl1OltOZ5GFHEuRSxFxEr/3YerRRF9keI7h1fT1Yg40D0PX6wKg7fvR7GHY9yBsp+NWsRS8QjM2T7WH0W8Eil++vbRuJavM9W15gsRr5TxBxFvlvHFiFS+Mc5EvLfF+4hHU18U8Rfl/J9fTRPV9aB7Xbn4tcZXpq/P9OR2rysf8f5w15XiId0fBjbFB2OfX5vqUUSruuKvpnv/ZQcAAAAAAAAAAAAAAACA3TYQRXwmUrz8H39U1RVHVZd++PzQ7w/+cm/N+NMfcpwy9/mIWCx2VpN7MBcGXk6XU3rItcSPs3oU8ce5/u9bD7szAAAAAAAAAAAAAAAAAAAAj7Ui3o0UL7xzNC1F75ri7ekbjSutq1OdVWG7a/9210xfW1tba6RObOY4nuNijks5Lue4kmMUuX0RUS/b58fjRUQ0G3eOv5T3L+e4kmMcyO1zbOY4nuNijks5Lue4kmP05fY5NnMcz3Exx6Ucl3NcyTH2ydq9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfJ0UU8fNI8e1vrKZIEdGMGI9OXO5/2L0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEr9qYjvR4rGHzTv7OuLiFT923G0/HYmmgfL+MloDpXxxWheyLFVxb7mtx5C/7k/tVTEjyNFf/2tOxOe57/WeXTnbRBvfnP90Wf7OvFA98nB9/ufOHL4/NDIrz293XbaqgPHLranb91ujA2PjIz27O7Lr/7Jnn2D+XWL3Rk6ETH/+huvtaamJuc+8sbB7kb5Fvjozbff6IvdOc7ub6S+3R3pxo3yPO7Ccbo/HfvijD3iG9G3L7rxcMbOY6C8/78XKX77nf/s3vA79/96/FLn0Z07fPzsT9bv/y9sPtCO7v+z797VgXz/L69aW93/n+zZ90L+baTWF1FfuDlbOxJRn3/9jePtm60bkzcmp8+cOPHloaEvnz5ROxhRv96emuzZ2o2zBQAAAAAAAAAAAAAAAPAApSJ+N1K0fryaGhFxu6rXGjw/9OzxZw7EgareakPd9qujVy40Xpq5OTs3OT8/OdEYm25fm5mY3OnL1atyr7HhkT0ZzIca2OP+D9Rfmpl9fa594w8Xtnz+UP3C1fmFuda1rZ+OgSgimr17jlUdHhseqTo91W5NV00vb1lM/9HVUhH/FSmunWmkz+d9uf5/c4X/hvr/xc0H2qP6/0/07CtfM6UifhYpfusvn47PV/08FHeds5z3t5Hi2LnP5bw4WOZ1+9D5XIFOZWCZ+3+R4h9/vjG3Ww/55HruyR2f2EdEOf+HI8X3//y78et538bPf9h6/g9tPtAezf9TPfsObfi8gvseOnn+j0eKF598K34j7/ugz//ofrrA0Zx85/M5Bt/v/7M9mP9P9ewbzK/7m7szdAAAAAAAAAAAgEdaLRXxd5HihyN96WzEWmUHf/83sflAm/7mq7ZLf//16Z59E/e1XlHvxr98YM6unFgAAAAA2AdqqYh3I8WNhbfu1FBvrP/uqf/8nfX6z+G06dnq//P9SvW5AbtZ/9lrML/u+P0PGwAAAAAAAAAAAAAAAAAAAPaVlIo4m9dTH6/q+Se2XU99OVK8/D/P5bx0pMzrrgM/WH2vX5qZPn5hamrmWmuhdXVqsjE627o2WbZ9KlKs/s3nctuiWl+9u958Z4339bXY5yLFyN93cztrsXfXJn9qPfdkmfuJSPHf/7Axt7uO9afWc0+VuX8dKb7+z1vnHlnPPV3mfjdS/OjrjW7uoTL3bM799Hru89dmij2YFQAAAAAAAAAAAAAAAAAAAB43tVTEn0aK/725dKeWP6//X+t5WHnzmz3r/W9yu1rnf7Ba/3+77XtZ/7/6XIHF7V4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+nlIU8UakmL20mpb7y8cd9Yvt6Vu3x4ZHtm42kKqWB6r88qt+8tTpM186O3SuGz+4/W77TLw6euVC46WZm7Nzk/PzkxONsen2tZmJyYiBnR2hp32Rd3Xa36Nj1Qlo3Hzt1sT16/ONU8+f3vD07cH3+584Mnh+6Nnjz3Rzx4ZHRkZ7cvpq9/zqd0nb7D8YRfxVpHjuez9JP+yPqMa+7bncmQ957+y1gWoQx6pBjA2PVAOZaremF8onL3dPRBHR6GnU7J6jBzAX96UZsVh2v+zwsXJ4o7OtudbVqcnG5dbcQnuhPTN9OXV6W46nEUWcSxFLEbHSf/fhalHEa5HiO4dX07/2RxzonocvXhr96olT2/ej2MMx7kDZz0YtYql4BOZsH+uPIv4pUvz07aPxb/0RfdH5ii9EvFLGH0S8GZ35TuUb40zEe1u8j3g09UUR/1/O//nV9HZ/eT3oXlcufq3xlenrMz253evKI39/eJD2+bWpHkX8qLrir6Z/93MNAAAAAAAAAAAAAAAAsI8U8auR4oV3jqaqPvhOTXF7+kbjSuvqVKesr1v7162ZXltbW2ukTmzmOJ7jYo5LOS7nuJJjFLl9js0y1tfWxvPjxRyXclzOcSXHOJDb59jMcTzHxRyXclzOcSXH6Mvtc2zmOJ7jYo5LOS7nuJJj7JPaPQAAAAAAAAAAAAAAAAAA4OOlqP5J8e1vrKa1/s760uPRicvWA/3Y+0UAAAD//1Zv8js=")
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2000008, &(0x7f0000000840)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

4m58.803216711s ago: executing program 0 (id=3174):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
syz_clone(0x800000, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

4m56.056936514s ago: executing program 0 (id=3185):
syz_mount_image$romfs(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x4, &(0x7f0000000400)=ANY=[], 0x1, 0x162, &(0x7f0000000440)="$eJzs2rFKw0AYB/Bv0LZ2EkenQiUK2iRNtK46ipu7Q6m5NnixJRGkXRzFSVA4B19C8Al8AunopksHXyJyzVGTqEWXJuj/t+QPX5J+vYPL8tX8rldnQY1oo3d9MFryu16lYW+3WJ01KbJHRBUZhmF4q9MnL5P6MCT9ixuytfIWXatrbbF/yVzuWFm3BAAAAAAAAAAAAAAAAAAAAAAAP6SVVSh3hHfBXO7UY9WgPzhucu74AVEp+WBpll1mR6uoGS5igt/J9bET9fUSFWlHJlfs+rJuJp+/UWG1I/hren2NU69nBP1BzfWabaftnFiW3TA3TXPLMsbvMtJv1O5VTzQMH8zYOJn+dCg702LzZs/T5s16C9FV7n+BaG7ZFVdn6V/72P+/Hhbz0UbmoaB2Pi/9/KtwPvWe+Rx0OAm/OELzbfz9GxFR0a4+yvNPb3X5kSrOYjmz/fsA8J33AAAA///CvDfq")
r0 = syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f80)='.\x00', 0x1a5a438, &(0x7f0000000fc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYRESOCT, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000002140))
getdents(r0, 0x0, 0x0)

4m55.432728936s ago: executing program 33 (id=3185):
syz_mount_image$romfs(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x4, &(0x7f0000000400)=ANY=[], 0x1, 0x162, &(0x7f0000000440)="$eJzs2rFKw0AYB/Bv0LZ2EkenQiUK2iRNtK46ipu7Q6m5NnixJRGkXRzFSVA4B19C8Al8AunopksHXyJyzVGTqEWXJuj/t+QPX5J+vYPL8tX8rldnQY1oo3d9MFryu16lYW+3WJ01KbJHRBUZhmF4q9MnL5P6MCT9ixuytfIWXatrbbF/yVzuWFm3BAAAAAAAAAAAAAAAAAAAAAAAP6SVVSh3hHfBXO7UY9WgPzhucu74AVEp+WBpll1mR6uoGS5igt/J9bET9fUSFWlHJlfs+rJuJp+/UWG1I/hren2NU69nBP1BzfWabaftnFiW3TA3TXPLMsbvMtJv1O5VTzQMH8zYOJn+dCg702LzZs/T5s16C9FV7n+BaG7ZFVdn6V/72P+/Hhbz0UbmoaB2Pi/9/KtwPvWe+Rx0OAm/OELzbfz9GxFR0a4+yvNPb3X5kSrOYjmz/fsA8J33AAAA///CvDfq")
r0 = syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f80)='.\x00', 0x1a5a438, &(0x7f0000000fc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYRESOCT, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000002140))
getdents(r0, 0x0, 0x0)

4m55.143029633s ago: executing program 3 (id=3196):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]})
capget(&(0x7f00000001c0)={0x20080522}, 0x0)

4m54.767213266s ago: executing program 3 (id=3200):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r0, 0x8926, 0x0)

4m54.164696305s ago: executing program 3 (id=3207):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0)

4m53.367590323s ago: executing program 3 (id=3216):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3004001, &(0x7f0000000180)={[{@showassoc}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@showassoc}, {@map_acorn}, {@overriderock}, {@session={'session', 0x3d, 0x62}}, {@cruft}, {@map_normal}, {}, {@map_acorn}, {@cruft}, {@nocompress}, {}, {@map_off}]}, 0xfe, 0xa43, &(0x7f0000000cc0)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))

4m52.700583193s ago: executing program 3 (id=3222):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x10, 0x10}, {0x5, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4894}, 0x4048001)
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001e1401000000000000000000090002"], 0x38}}, 0x0)

4m52.113471503s ago: executing program 3 (id=3228):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090)

4m51.419381292s ago: executing program 34 (id=3228):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090)

4m5.804860605s ago: executing program 7 (id=3664):
mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x103)
r0 = openat(0xffffffffffffff9c, &(0x7f00000090c0)='./file0\x00', 0x101001, 0x0)
writev(r0, &(0x7f0000009100)=[{&(0x7f0000009140)="e1", 0x56000}], 0x1)

4m5.769692261s ago: executing program 7 (id=3666):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200002, 0x200003, 0x803, 0x4, 0x7})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000540))

4m5.588864499s ago: executing program 7 (id=3667):
mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000000)=0x5, 0x4, 0x0)
set_mempolicy_home_node(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0)
set_mempolicy_home_node(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x0)

4m5.471479875s ago: executing program 7 (id=3668):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1c5)
mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m5.150873206s ago: executing program 7 (id=3672):
unshare(0xa020480)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000180)=0x41)

4m4.139254456s ago: executing program 7 (id=3680):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380))

4m3.647143995s ago: executing program 35 (id=3680):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380))

2m38.702007501s ago: executing program 8 (id=4590):
syz_mount_image$exfat(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22c9337721601c52, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x400)

2m38.624879854s ago: executing program 8 (id=4592):
r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453", 0xc0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000340), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r0, r1}, &(0x7f0000000440)=""/68, 0x44, &(0x7f0000000400)={&(0x7f00000002c0)={'xcbc(aes)\x00'}})

2m38.458560561s ago: executing program 8 (id=4596):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x4043, &(0x7f00000002c0), 0x0, 0x246, &(0x7f0000000540)="$eJzs3TFoJFUcBvBvZne9y2WRUxtBUEFENBDOTrA5G4UDOYKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiuzk0g0K1F33RHn94Mhb7Lvzf8NM9/bbWY3QGtdTnI1SSfJXJJekuJ0hzvr7fLx7ubM7mIyGDz2QzHsV+/XTsbNJtlI8kCSnbLIC91kbfupg5/2Hrnn9dXe3e9uPzkz1ZM8dniw/+jRO9df++Da/WufffHd9SJX0//deU1eMeJ/3SK5+d8o9h9RdJueAX/Fwivvf1nl/pYkdw3z30uZ+uK9sXLDTi/3vf1nY9/8/vPbpjlXYPIGg171HrgxqBQZAO1RJumnKOeT1O2ynJ+vP8N/1blUvri88vLc88urS881vVIBk9JP9h/+6MKHs3/I/7edOv/A/1eV/8cXtr6u2kedpmcDTFOV/7ln1u+N/EPryD+0l/xDe8k/tJf8Q3vJP7SX/EO7XDzVln9oL/mH9vpb+b84nTkB03E6/wBAuwwuNP0EMtCUptcfAAAAAAAAAAAAAAAAAADgrM2Z3cWT7Zyus5Oq+clbyeFDSbqj6neGv0d88uVjl34sqm6/KephY3n6jjEPMKb3Gn76+sZvmq3/6e3N1l9fSjZeTXKl2z17/xXH998/d9M5r/eeHbPAmB58otn6v2w1W//aXvJxtf5cGbX+lLl1+Hf0+tOvrt+Y9V/6ecwDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDW/BgAA///ep2tH")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000080)=ANY=[@ANYBLOB="696f636861727365743d63703836342c757466383d312c73686f72746e352c73686f72746e616d653d77696e39352c756e695f786c6174653d312c726f6469722c73686f72746e616d653d77816e6e742c756e695f786c6174653d312c757466383d302c757466383d312c636865636b3d6e6f726d616c2c696f636861727365743d69736f383835392d392c6e6f6e756d7461696c3d302c757466383d302c757466383d302c756e695f786c6174653d302c00"], 0x3, 0x292, &(0x7f0000000180)="$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")
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000040)={0x43a3, 0x100000000, 0x7ffffffffff00042, 0x1000000001, 0x3, 0x400})

2m38.149238869s ago: executing program 8 (id=4598):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x10800, &(0x7f0000000240)={[{@keep_last_dots}, {@sys_tz}, {@keep_last_dots}, {}, {}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@sys_tz}, {@umask={'umask', 0x3d, 0x3}}, {@utf8}, {@time_offset={'time_offset', 0x3d, 0x1}}]}, 0x1, 0x152a, &(0x7f0000001f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x147)
mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0)

2m37.810642169s ago: executing program 8 (id=4603):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001780)=""/4112, 0x1010}, {&(0x7f00000027c0)=""/90, 0x5a}, {&(0x7f0000002840)=""/42, 0x2a}, {&(0x7f0000002880)=""/98, 0x62}, {&(0x7f00000004c0)=""/4102, 0x1006}, {&(0x7f00000001c0)=""/122, 0x7a}, {&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f0000000300)=""/15, 0xf}, {&(0x7f0000001500)=""/79, 0x4f}], 0x9}}], 0x1, 0x12140, 0x0)

2m37.2960594s ago: executing program 8 (id=4612):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x800000000})

2m36.887891858s ago: executing program 36 (id=4612):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x800000000})

4.294698582s ago: executing program 4 (id=6232):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', 0x800, &(0x7f0000000180)={0x1, 0x70, 0x80000}, 0x20)

4.182571135s ago: executing program 4 (id=6234):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4)

4.040387911s ago: executing program 4 (id=6237):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r2, @ANYBLOB="30005e8004000100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)

4.004390763s ago: executing program 4 (id=6238):
setresuid(0xee01, 0xee01, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x200002, 0x200003, 0x801, 0x4, 0x7})
faccessat2(r0, &(0x7f00000000c0)='\x00', 0x0, 0x1100)

3.941193782s ago: executing program 4 (id=6240):
r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x931b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x73, 0x10, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x80}}}}}]}}, 0x0)

3.590744481s ago: executing program 1 (id=6246):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21081e, &(0x7f0000000bc0)={[{@jqfmt_vfsv1}, {@nodelalloc}, {@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}]}, 0x1, 0x516, &(0x7f00000005c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000400)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x8000000001, 0xfff000000000000, 0x40000000000f0, 0x1000000006, 0xfffffffffffffff8, 0x5, 0x2, 0x400f6b})
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000240)={0x200000, 0x200003, 0x9, 0x0, 0x7, 0x3})
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

3.382174932s ago: executing program 1 (id=6249):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000880)={&(0x7f00000008c0)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="89000000120081ae08060cdc030ec0007f03e3f70000004100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000)

3.310348925s ago: executing program 9 (id=6250):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000980)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000009c0)=0x11)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

3.099149843s ago: executing program 1 (id=6255):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020)

3.014233596s ago: executing program 6 (id=6256):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)

2.926294578s ago: executing program 1 (id=6257):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000980), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000009c0)={&(0x7f0000000a00)=[{0x48, 0x2000, 0x0, 0x0}, {0x5, 0x8801, 0x0, 0x0}], 0x2})

2.813685012s ago: executing program 9 (id=6260):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000480), 0x1, 0x402)
writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000500)=' ', 0x1}], 0x1)

1.94967539s ago: executing program 6 (id=6264):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0xcd, 0x0, 0x4}, 0x9c)

1.618107432s ago: executing program 6 (id=6265):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x180, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x154, 0x2, [@TCA_BPF_ACT={0x150, 0x1, [@m_mirred={0x90, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xbc, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x8d, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd38"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.513517832s ago: executing program 6 (id=6266):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000065c0)=@filename='mtd0\x00', &(0x7f0000006600)='./file0\x00', &(0x7f0000006640)='jffs2\x00', 0x0, 0x0)
lsetxattr(&(0x7f0000006680)='./file0\x00', &(0x7f00000066c0)=@random={'security.', '\\\\\x00'}, 0x0, 0x0, 0x0)
listxattr(&(0x7f0000006700)='./file0\x00', 0x0, 0x0)

1.299792891s ago: executing program 1 (id=6268):
r0 = syz_clone(0x20000011, 0x0, 0xffffffffffffff99, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setuid(0xee01)
ioprio_set$pid(0x1, r0, 0x4007)

1.283526787s ago: executing program 6 (id=6269):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000001b40))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)

1.148180296s ago: executing program 5 (id=6270):
syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x804, &(0x7f0000001140)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_mixed}, {@utf8}, {@uni_xlate}, {@fat=@nocase}, {@fat=@flush}, {@rodir}, {@utf8}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@shortname_mixed}, {@rodir}, {@utf8}, {@numtail}, {@utf8no}, {@rodir}]}, 0x1, 0x28e, &(0x7f00000017c0)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)

1.099851304s ago: executing program 9 (id=6271):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000029c0), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002a00)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = syz_open_procfs(0x0, &(0x7f0000000840)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000000880)={0x2020}, 0x2020)

1.077462869s ago: executing program 1 (id=6272):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x48, 0x0, &(0x7f0000000180)="5351e31d94c9f8291396be61802305624443ed33730100005968cb15539ab8469f765b4c62f07aaa4b460c5f1b3a0000986919d5d5fe00c6c8898859dce61e0ff1375c46e8685113", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

764.600162ms ago: executing program 4 (id=6273):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f9010243010902120001000000000904"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a00)={0x34, &(0x7f00000006c0)={0x20, 0xf, 0x1, 'W'}, 0x0, 0x0, 0x0, 0x0, 0x0})

764.358936ms ago: executing program 5 (id=6274):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

689.673048ms ago: executing program 9 (id=6275):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x18, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x3a, 0xc, &(0x7f0000000640)="000000f80500000021c1bfee806d86c2826ac2f392a4b32e1034024b8c88abaa88405ae3fd3809000000b5a5b6e12efeade2443c385037e2db2e", &(0x7f0000000600)=""/16, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2a)

512.351028ms ago: executing program 5 (id=6276):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000680)='./dev\x00', &(0x7f00000006c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/sda\x00', 0x2, 0x0)
ioctl$BLKZEROOUT(r0, 0xc01070ce, 0x0)

308.303754ms ago: executing program 9 (id=6277):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0xb, 0x4)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000600), 0x4)

306.757953ms ago: executing program 5 (id=6278):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c6167730007020000000002000000000200000000080200000000", 0x42)

121.953652ms ago: executing program 9 (id=6279):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000580140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)

103.139336ms ago: executing program 5 (id=6280):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x60100, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

80.353899ms ago: executing program 6 (id=6281):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000400)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='.\x00', 0x8000, 0x4a)
open_by_handle_at(r1, &(0x7f0000000800)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x3, 0xc}, 0x3, 0x9}}, 0x22000)

0s ago: executing program 5 (id=6282):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = open(&(0x7f0000000000)='.\x00', 0x8000, 0x50)
fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
fchown(r0, r1, 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  575.940195][ T1243] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  575.940236][ T1243] usb 10-1: config 0 interface 0 has no altsetting 0
[  575.942935][ T1243] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  575.942961][ T1243] usb 10-1: Product: syz
[  575.942976][ T1243] usb 10-1: Manufacturer: syz
[  575.942993][ T1243] usb 10-1: SerialNumber: syz
[  576.014779][ T1243] usb 10-1: config 0 descriptor??
[  576.027950][ T1243] usb 10-1: selecting invalid altsetting 0
[  576.286417][ T1243] usb 10-1: USB disconnect, device number 4
[  576.495467][T19567] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.5216' resets device
[  576.579659][T19569] loop6: detected capacity change from 0 to 4096
[  576.679217][T19574] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  576.685042][T19569] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  576.826471][T19569] NILFS (loop6): mounting fs with errors
[  576.928574][T19569] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean
[  577.242834][ T1243] hid-sensor-hub 0003:1234:5678.0029: hidraw0: USB HID v0.01 Device [syz0] on syz0
[  577.336857][T19582] loop1: detected capacity change from 0 to 32768
[  577.532055][T19582] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  577.681138][T19582] XFS (loop1): Ending clean mount
[  577.697022][T19582] XFS (loop1): Quotacheck needed: Please wait.
[  577.753118][T19605] loop4: detected capacity change from 0 to 4096
[  577.764923][T19605] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  577.941493][T19605] ntfs3(loop4): ino=19, mi_enum_attr
[  577.941531][T19605] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  577.947985][T19605] ntfs3(loop4): ino=1a, mi_enum_attr
[  577.948143][T19605] ntfs3(loop4): ino=1a, mi_enum_attr
[  577.948160][T19605] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  578.105386][T19582] XFS (loop1): Quotacheck: Done.
[  578.164413][ T5639] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  579.140284][T19641] rdma_op ffff88802b823a38 conn xmit_rdma 0000000000000000
[  579.323246][T19648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5250'.
[  579.323345][T19648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5250'.
[  579.545326][   T33] dummy0: entered promiscuous mode
[  579.545741][T19655] macvtap1: entered allmulticast mode
[  579.545764][T19655] dummy0: entered allmulticast mode
[  579.591456][T19655] dummy0: left allmulticast mode
[  579.653297][T19663] loop6: detected capacity change from 0 to 256
[  579.679422][T19663] exfat: Deprecated parameter 'namecase'
[  579.679491][T19663] exfat: Deprecated parameter 'namecase'
[  579.726602][T19663] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc36ae4d7, utbl_chksum : 0xe619d30d)
[  579.796132][   T33] dummy0: left promiscuous mode
[  579.878895][T19667] loop4: detected capacity change from 0 to 256
[  579.918582][T19667] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  580.335736][T19685] tipc: Started in network mode
[  580.335771][T19685] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  580.335937][T19685] tipc: Enabled bearer <eth:ipvlan0>, priority 15
[  580.746196][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5278'.
[  581.004982][T19722] loop4: detected capacity change from 0 to 128
[  581.078766][T19722] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  581.079264][T19722] ext4 filesystem being mounted at /1106/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  581.220097][T19733] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5288'.
[  581.225801][ T5651] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  581.447949][ T1243] tipc: Node number set to 10136234
[  581.710828][T19748] block nbd4: NBD_DISCONNECT
[  581.732962][T19732] loop5: detected capacity change from 0 to 40427
[  581.744065][T19732] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  581.744095][T19732] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  581.765871][T19732] F2FS-fs (loop5): invalid crc value
[  581.802515][T19752] syz.9.5298 (19752): drop_caches: 4
[  581.910191][T19732] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  581.952401][T19732] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  581.952435][T19732] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  581.990365][  T164] kworker/u8:6: attempt to access beyond end of device
[  581.990365][  T164] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  581.990454][  T164] CPU: 0 UID: 0 PID: 164 Comm: kworker/u8:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  581.990482][  T164] Tainted: [L]=SOFTLOCKUP
[  581.990491][  T164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  581.990504][  T164] Workqueue: writeback wb_workfn (flush-7:5)
[  581.990540][  T164] Call Trace:
[  581.990550][  T164]  <TASK>
[  581.990560][  T164]  dump_stack_lvl+0xe8/0x150
[  581.990596][  T164]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  581.990631][  T164]  f2fs_write_end_bio+0xf7d/0x1310
[  581.990675][  T164]  __submit_merged_bio+0x258/0x6a0
[  581.990703][  T164]  ? rcu_is_watching+0x16/0xb0
[  581.990734][  T164]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  581.990766][  T164]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  581.990822][  T164]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  581.990848][  T164]  ? ret_from_fork_asm+0x1a/0x30
[  581.990902][  T164]  ? kfree+0x1c7/0x650
[  581.990925][  T164]  ? cfg80211_inform_single_bss_data+0xd9d/0x1df0
[  581.990957][  T164]  ? ieee80211_bss_info_update+0x791/0xa50
[  581.990990][  T164]  ? ieee80211_ibss_rx_queued_mgmt+0x1df0/0x2df0
[  581.991017][  T164]  ? process_scheduled_works+0xc3d/0x1630
[  581.991049][  T164]  ? worker_thread+0xa47/0xfb0
[  581.991068][  T164]  ? kthread+0x38b/0x480
[  581.991105][  T164]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  581.991188][  T164]  ? ieee80211_inform_bss+0xc79/0x1180
[  581.991251][  T164]  ? __skb_flow_dissect+0x6543/0x6da0
[  581.991419][  T164]  ? __lock_acquire+0x747/0x2de0
[  581.991455][  T164]  ? __lock_acquire+0x747/0x2de0
[  581.991501][  T164]  ? __lock_acquire+0x747/0x2de0
[  581.991550][  T164]  ? __lock_acquire+0x747/0x2de0
[  581.991602][  T164]  ? do_raw_spin_unlock+0xf5/0x200
[  581.991628][  T164]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  581.991662][  T164]  do_writepages+0x338/0x560
[  581.991697][  T164]  ? reacquire_held_locks+0x117/0x1a0
[  581.991728][  T164]  ? writeback_sb_inodes+0x450/0x1af0
[  581.991762][  T164]  __writeback_single_inode+0x136/0x1220
[  581.991795][  T164]  ? do_raw_spin_unlock+0xf5/0x200
[  581.991825][  T164]  writeback_sb_inodes+0x9de/0x1af0
[  581.991851][  T164]  ? __lock_acquire+0x747/0x2de0
[  581.991886][  T164]  ? lock_acquire+0x115/0x350
[  581.991934][  T164]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  581.992022][  T164]  ? rcu_is_watching+0x16/0xb0
[  581.992045][  T164]  ? queue_io+0x2d3/0x470
[  581.992077][  T164]  wb_writeback+0x41c/0xad0
[  581.992108][  T164]  ? queue_io+0x221/0x470
[  581.992143][  T164]  ? __pfx_wb_writeback+0x10/0x10
[  581.992168][  T164]  ? do_raw_spin_lock+0x12b/0x2f0
[  581.992213][  T164]  wb_workfn+0x431/0x10f0
[  581.992258][  T164]  ? __pfx_wb_workfn+0x10/0x10
[  581.992290][  T164]  ? trace_hrtimer_start+0x82/0x200
[  581.992326][  T164]  ? do_raw_spin_lock+0x12b/0x2f0
[  581.992361][  T164]  ? lock_acquire+0x115/0x350
[  581.992402][  T164]  ? rcu_is_watching+0x16/0xb0
[  581.992426][  T164]  ? process_scheduled_works+0x97a/0x1630
[  581.992461][  T164]  process_scheduled_works+0xc3d/0x1630
[  581.992531][  T164]  ? __pfx_process_scheduled_works+0x10/0x10
[  581.992571][  T164]  ? assign_work+0x3cf/0x5d0
[  581.992611][  T164]  worker_thread+0xa47/0xfb0
[  581.992665][  T164]  kthread+0x38b/0x480
[  581.992691][  T164]  ? __pfx_worker_thread+0x10/0x10
[  581.992710][  T164]  ? __pfx_kthread+0x10/0x10
[  581.992736][  T164]  ret_from_fork+0x514/0xb70
[  581.992765][  T164]  ? __pfx_ret_from_fork+0x10/0x10
[  581.992789][  T164]  ? __switch_to+0xc78/0x1410
[  581.992814][  T164]  ? __pfx_kthread+0x10/0x10
[  581.992843][  T164]  ret_from_fork_asm+0x1a/0x30
[  581.992887][  T164]  </TASK>
[  582.003080][  T164] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  582.265146][T19761] veth0_to_bond: entered promiscuous mode
[  582.282244][T19761] veth0_to_bond: left promiscuous mode
[  582.600942][T19768] loop5: detected capacity change from 0 to 1024
[  582.633046][T19769] ip_tables: iptables: counters copy to user failed while replacing table
[  582.907863][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5311'.
[  582.907893][T19779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5311'.
[  583.299510][T19777] loop9: detected capacity change from 0 to 32768
[  583.307746][T19777] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5310 (19777)
[  583.357335][T19777] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  583.357375][T19777] BTRFS info (device loop9): using crc32c checksum algorithm
[  583.483179][T19777] BTRFS info (device loop9): enabling ssd optimizations
[  583.483213][T19777] BTRFS info (device loop9): turning on flush-on-commit
[  583.483233][T19777] BTRFS info (device loop9): enabling free space tree
[  583.483251][T19777] BTRFS info (device loop9): enabling auto defrag
[  583.483270][T19777] BTRFS info (device loop9): use lzo compression, level 1
[  583.483291][T19777] BTRFS info (device loop9): max_inline set to 4096
[  583.552947][   T34] audit: type=1800 audit(1794369231.782:260): pid=19777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5310" name="file1" dev="loop9" ino=260 res=0 errno=-22
[  583.666972][T17879] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  584.171581][ T1243] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  584.310749][T19807] loop1: detected capacity change from 0 to 32768
[  584.322242][ T1243] usb 10-1: New USB device found: idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  584.326124][ T1243] usb 10-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  584.326150][ T1243] usb 10-1: Product: syz
[  584.326164][ T1243] usb 10-1: Manufacturer: syz
[  584.326178][ T1243] usb 10-1: SerialNumber: syz
[  584.346202][T19807] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5317 (19807)
[  584.379763][ T1243] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  584.452583][T19807] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  584.452622][T19807] BTRFS info (device loop1): using blake2b checksum algorithm
[  584.490580][T19825] loop6: detected capacity change from 0 to 4096
[  584.582972][T19837] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  584.611920][T19807] BTRFS info (device loop1): enabling ssd optimizations
[  584.611951][T19807] BTRFS info (device loop1): turning on async discard
[  584.611969][T19807] BTRFS info (device loop1): enabling free space tree
[  584.789426][ T1243] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  584.789479][ T1243] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  584.840061][ T5639] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  584.893634][T19843] CUSE: unknown device info "n¸Þ|’zQC*¯"
[  584.893657][T19843] CUSE: unknown device info "G2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\�d�
+"
[  584.893672][T19843] CUSE: unknown device info "Ýÿÿÿ"
[  584.893683][T19843] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu	GìÂÏǪ|ÜQüUËœDv…F‰Ý,*pá(o9Ð{uáöº[§èµ¨‘²égIÁPÌÍYV"
[  584.893696][T19843] CUSE: DEVNAME unspecified
[  585.111196][ T1243] usb 10-1: USB disconnect, device number 5
[  585.919710][T19869] loop4: detected capacity change from 0 to 4096
[  585.994032][T19869] ntfs3(loop4): ino=19, mi_enum_attr
[  585.994069][T19869] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  586.064489][T19875] loop6: detected capacity change from 0 to 128
[  586.141668][T19875] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  586.141766][T19875] hpfs: filesystem error: improperly stopped
[  586.141785][T19875] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  586.141802][T19875] hpfs: You really don't want any checks? You are crazy...
[  586.141815][T19875] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  586.141829][T19875] hpfs: code page support is disabled
[  586.141977][T19875] hpfs: hpfs_map_4sectors(): unaligned read
[  586.142060][T19875] hpfs: hpfs_map_4sectors(): unaligned read
[  586.142072][T19875] hpfs: filesystem error: unable to find root dir
[  586.573713][T19859] loop5: detected capacity change from 0 to 32768
[  586.578926][T19859] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5332 (19859)
[  586.635909][T19859] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  586.635949][T19859] BTRFS info (device loop5): using crc32c checksum algorithm
[  586.764305][T19859] BTRFS info (device loop5): enabling ssd optimizations
[  586.764337][T19859] BTRFS info (device loop5): turning on flush-on-commit
[  586.764356][T19859] BTRFS info (device loop5): enabling free space tree
[  586.764373][T19859] BTRFS info (device loop5): enabling auto defrag
[  586.764391][T19859] BTRFS info (device loop5): use lzo compression, level 1
[  586.764412][T19859] BTRFS info (device loop5): max_inline set to 4096
[  586.917054][T19908] loop6: detected capacity change from 0 to 1764
[  587.011498][T19908] iso9660: Corrupted directory entry in block 14 of inode 1920
[  587.169204][T13320] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  587.699875][T19910] loop9: detected capacity change from 0 to 32768
[  587.713077][T19910] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5350 (19910)
[  587.733025][T19910] BTRFS info (device loop9): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  587.733062][T19910] BTRFS info (device loop9): using blake2b checksum algorithm
[  587.749297][T19922] loop6: detected capacity change from 0 to 512
[  587.802960][T19922] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.5356: bg 0: block 5: invalid block bitmap
[  587.802999][T19922] loop6: lost filesystem error report for type 5 error -117
[  587.804423][T19922] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  587.804446][T19922] loop6: lost filesystem error report for type 5 error -117
[  587.809866][    C0] EXT4-fs (loop6): error count since last fsck: 2
[  587.809892][    C0] EXT4-fs (loop6): initial error at time 1794369236: ext4_validate_block_bitmap:436
[  587.809918][    C0] EXT4-fs (loop6): last error at time 1794369236: ext4_mb_clear_bb:6678
[  587.860893][T19922] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #11: comm syz.6.5356: invalid indirect mapped block 3 (level 2)
[  587.860931][T19922] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  587.872223][T19922] EXT4-fs (loop6): 1 orphan inode deleted
[  587.872249][T19922] EXT4-fs (loop6): 1 truncate cleaned up
[  587.900343][T19922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  588.043703][T19910] BTRFS info (device loop9): enabling ssd optimizations
[  588.043735][T19910] BTRFS info (device loop9): using spread ssd allocation scheme
[  588.043752][T19910] BTRFS info (device loop9): turning off barriers
[  588.043769][T19910] BTRFS info (device loop9): enabling free space tree
[  588.043787][T19910] BTRFS info (device loop9): enabling auto defrag
[  588.043806][T19910] BTRFS info (device loop9): force zlib compression, level 3
[  588.186479][T14033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.233699][   T34] audit: type=1800 audit(1794369236.462:261): pid=19910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5350" name="file1" dev="loop9" ino=260 res=0 errno=-22
[  588.456773][T17879] BTRFS info (device loop9): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  588.508539][T19939] loop1: detected capacity change from 0 to 32768
[  588.681923][T19939] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  588.716335][T19939] JBD2: Ignoring recovery information on journal
[  588.923567][T19939] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  589.421105][T19920] loop4: detected capacity change from 0 to 32768
[  589.510316][T19920] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  589.575770][T19920] XFS (loop4): Ending clean mount
[  589.653631][T19971] syz_tun: entered promiscuous mode
[  589.653926][T19971] macsec2: entered allmulticast mode
[  589.653942][T19971] syz_tun: entered allmulticast mode
[  589.676787][T19971] syz_tun: left allmulticast mode
[  589.676841][T19971] syz_tun: left promiscuous mode
[  589.715607][ T5651] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  590.151213][T19978] loop5: detected capacity change from 0 to 512
[  590.282812][ T5639] ocfs2: Unmounting device (7,1) on (node local)
[  590.306325][T19978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  590.306453][T19978] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  590.493389][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.615224][T19991] loop1: detected capacity change from 0 to 512
[  590.629876][T19991] EXT4-fs (loop1): Test dummy encryption mode enabled
[  590.678769][T19991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e066e02d, mo2=0002]
[  590.678918][T19991] System zones: 1-12
[  590.684164][T19991] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  590.755719][T19994] netlink: 'syz.5.5377': attribute type 1 has an invalid length.
[  590.757142][T19991] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.5374: Directory hole found for htree leaf block 0
[  590.783663][T19991] EXT4-fs (loop1): Remounting filesystem read-only
[  590.788664][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5378'.
[  590.908269][ T5639] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  590.962621][T20002] hub 8-0:1.0: USB hub found
[  590.966381][T20002] hub 8-0:1.0: 1 port detected
[  591.208177][   T33] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  591.256208][T20019] loop4: detected capacity change from 0 to 64
[  591.301025][T20020] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5390'.
[  591.358295][   T33] usb 6-1: New USB device found: idVendor=17ef, idProduct=6062, bcdDevice=0.00
[  591.359664][   T33] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  591.359700][   T33] usb 6-1: config 0 interface 0 has no altsetting 0
[  591.359738][   T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.363186][   T33] usb 6-1: config 0 descriptor??
[  591.364051][T20004] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  591.448250][ T5779] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  591.504035][T20025] loop6: detected capacity change from 0 to 64
[  591.529195][T20025] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.	Mounting read-only.
[  591.598232][ T5779] usb 2-1: Using ep0 maxpacket: 32
[  591.600406][ T5779] usb 2-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  591.601743][ T5779] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  591.601769][ T5779] usb 2-1: config 0 has no interface number 0
[  591.603368][T20027] loop4: detected capacity change from 0 to 256
[  591.606640][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.606662][ T5779] usb 2-1: Product: syz
[  591.606672][ T5779] usb 2-1: Manufacturer: syz
[  591.606680][ T5779] usb 2-1: SerialNumber: syz
[  591.630843][ T5779] usb 2-1: config 0 descriptor??
[  591.666681][ T5779] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  591.666748][ T5779] usb 2-1: selecting invalid altsetting 1
[  591.666765][ T5779] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  591.699183][T20027] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fcb6, chksum : 0x64b32e36, utbl_chksum : 0xe619d30d)
[  591.775128][ T5779] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  591.775927][ T5779] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  591.775989][ T5779] usb 2-1: media controller created
[  591.792169][ T5779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  591.825340][   T33] hid_parser_main: 30 callbacks suppressed
[  591.825366][   T33] lenovo 0003:17EF:6062.002A: unknown main item tag 0x2
[  591.825401][   T33] lenovo 0003:17EF:6062.002A: unknown main item tag 0x3
[  591.825426][   T33] lenovo 0003:17EF:6062.002A: unknown main item tag 0x1
[  591.825451][   T33] lenovo 0003:17EF:6062.002A: unknown main item tag 0x2
[  591.870529][   T33] lenovo 0003:17EF:6062.002A: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.5-1/input0
[  592.007668][ T5768] usb 6-1: USB disconnect, device number 11
[  592.042543][T20030] fido_id[20030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  592.276794][T20038] loop4: detected capacity change from 0 to 8
[  592.295296][T20041] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5399'.
[  592.371990][T20044] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5401'.
[  592.677599][ T5768] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  592.828288][ T5768] usb 10-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  592.830070][ T5768] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.837055][ T5768] usb 10-1: config 0 descriptor??
[  592.863134][ T5768] cp210x 10-1:0.0: cp210x converter detected
[  592.891366][ T5779] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  592.891505][ T5779] zl10353_read_register: readreg error (reg=127, ret==-110)
[  593.054536][T20067] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5412'.
[  593.054576][T20067] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5412'.
[  593.102972][ T5779] usb 2-1: USB disconnect, device number 22
[  593.505019][ T5768] cp210x 10-1:0.0: failed to get vendor val 0x370c size 73: -71
[  593.505053][ T5768] cp210x 10-1:0.0: GPIO initialisation failed: -71
[  593.519875][T20061] loop5: detected capacity change from 0 to 40427
[  593.543080][T20061] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  593.543112][T20061] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  593.574487][ T5768] usb 10-1: cp210x converter now attached to ttyUSB0
[  593.576415][T20061] F2FS-fs (loop5): invalid crc value
[  593.594463][ T5768] usb 10-1: USB disconnect, device number 6
[  593.625624][ T5768] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  593.626485][ T5768] cp210x 10-1:0.0: device disconnected
[  593.717293][T20061] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  593.743615][T20061] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  593.743645][T20061] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  593.988566][T13320] syz-executor: attempt to access beyond end of device
[  593.988566][T13320] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  593.995425][T13320] CPU: 1 UID: 0 PID: 13320 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  593.995463][T13320] Tainted: [L]=SOFTLOCKUP
[  593.995471][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  593.995485][T13320] Call Trace:
[  593.995494][T13320]  <TASK>
[  593.995503][T13320]  dump_stack_lvl+0xe8/0x150
[  593.995548][T13320]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  593.995585][T13320]  f2fs_write_end_bio+0xf7d/0x1310
[  593.995627][T13320]  __submit_merged_bio+0x258/0x6a0
[  593.995654][T13320]  ? rcu_is_watching+0x16/0xb0
[  593.995683][T13320]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  593.995713][T13320]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  593.995768][T13320]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  593.995815][T13320]  ? __lock_acquire+0x747/0x2de0
[  593.995859][T13320]  ? lock_acquire+0xc0/0x350
[  593.995898][T13320]  ? ktime_get+0x45/0x220
[  593.995926][T13320]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  593.995998][T13320]  ? __lock_acquire+0x747/0x2de0
[  593.996049][T13320]  ? rcu_is_watching+0x16/0xb0
[  593.996069][T13320]  ? __kasan_check_byte+0x12/0x40
[  593.996095][T13320]  ? rcu_is_watching+0x16/0xb0
[  593.996117][T13320]  ? lock_release+0x4b/0x3c0
[  593.996144][T13320]  ? lock_release+0x4b/0x3c0
[  593.996180][T13320]  ? is_bpf_text_address+0x292/0x2b0
[  593.996207][T13320]  ? is_bpf_text_address+0x26/0x2b0
[  593.996237][T13320]  ? kernel_text_address+0xa5/0xe0
[  593.996268][T13320]  ? __kernel_text_address+0xd/0x30
[  593.996306][T13320]  ? unwind_get_return_address+0x4d/0x90
[  593.996335][T13320]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  593.996366][T13320]  ? arch_stack_walk+0xfb/0x150
[  593.996412][T13320]  ? stack_trace_save+0xa9/0x100
[  593.996440][T13320]  ? __pfx_stack_trace_save+0x10/0x10
[  593.996477][T13320]  ? check_path+0x21/0x40
[  593.996509][T13320]  ? add_lock_to_list+0xc7/0x100
[  593.996534][T13320]  ? lockdep_unlock+0x5c/0xd0
[  593.996559][T13320]  ? __lock_acquire+0x1511/0x2de0
[  593.996622][T13320]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  593.996658][T13320]  do_writepages+0x338/0x560
[  593.996698][T13320]  ? do_raw_spin_unlock+0xf5/0x200
[  593.996730][T13320]  filemap_fdatawrite+0x1e9/0x2f0
[  593.996760][T13320]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  593.996840][T13320]  ? do_raw_spin_unlock+0xf5/0x200
[  593.996870][T13320]  f2fs_sync_dirty_inodes+0x471/0x970
[  593.996925][T13320]  f2fs_write_checkpoint+0x867/0x24d0
[  593.996991][T13320]  kill_f2fs_super+0x2df/0x700
[  593.997028][T13320]  ? rcu_do_enqueue+0x60d/0x870
[  593.997054][T13320]  ? lockdep_hardirqs_on+0x7b/0x110
[  593.997084][T13320]  ? __pfx_kill_f2fs_super+0x10/0x10
[  593.997133][T13320]  ? __pfx_call_rcu+0x10/0x10
[  593.997159][T13320]  ? shrinker_free+0x2a7/0x3b0
[  593.997187][T13320]  deactivate_locked_super+0xbe/0x110
[  593.997222][T13320]  cleanup_mnt+0x204/0x2a0
[  593.997250][T13320]  task_work_run+0x1d9/0x260
[  593.997283][T13320]  ? __pfx_task_work_run+0x10/0x10
[  593.997331][T13320]  exit_to_user_mode_loop+0x204/0x770
[  593.997361][T13320]  ? rcu_is_watching+0x16/0xb0
[  593.997388][T13320]  do_syscall_64+0x336/0x540
[  593.997412][T13320]  ? trace_irq_disable+0x3b/0x140
[  593.997430][T13320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.997454][T13320]  ? clear_bhb_loop+0x70/0xc0
[  593.997480][T13320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.997501][T13320] RIP: 0033:0x00007f21713aa157
[  593.997522][T13320] Code: a2 c7 05 9c 25 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  593.997540][T13320] RSP: 002b:00007fffb71b4748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  593.997562][T13320] RAX: 0000000000000000 RBX: 00007f2171437363 RCX: 00007f21713aa157
[  593.997577][T13320] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb71b4800
[  593.997590][T13320] RBP: 00007fffb71b4800 R08: 00007fffb71b5800 R09: 00000000ffffffff
[  593.997605][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb71b5890
[  593.997618][T13320] R13: 00007f2171437363 R14: 00000000000911b9 R15: 00007fffb71b58d0
[  593.997654][T13320]  </TASK>
[  594.075610][T13320] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  594.586021][T20088] loop1: detected capacity change from 0 to 32768
[  595.075657][T20105] Format for adding new device is "id port_count num_queues" (uint uint uint).
[  595.269158][ T5768] sony 0005:054C:03D5.002B: UNIQ does not contain a MAC address; duplicate check skipped
[  595.393275][ T5768] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.002B/input/input31
[  595.560083][ T5768] sony 0005:054C:03D5.002B: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0
[  595.766152][T20112] fido_id[20112]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  595.876266][T20104] loop9: detected capacity change from 0 to 32768
[  595.888224][T20104] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5430 (20104)
[  595.911091][T20104] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  595.911131][T20104] BTRFS info (device loop9): using crc32c checksum algorithm
[  596.031675][T20104] BTRFS info (device loop9): enabling ssd optimizations
[  596.031708][T20104] BTRFS info (device loop9): turning on flush-on-commit
[  596.031725][T20104] BTRFS info (device loop9): turning on async discard
[  596.031743][T20104] BTRFS info (device loop9): enabling free space tree
[  596.031763][T20104] BTRFS info (device loop9): use lzo compression, level 1
[  596.031783][T20104] BTRFS info (device loop9): max_inline set to 60
[  596.264916][T17879] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  596.307742][T20142] loop4: detected capacity change from 0 to 256
[  596.764378][T20153] loop4: detected capacity change from 0 to 512
[  596.774322][T20153] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  596.774342][T20153] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  596.786093][T20153] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #16: comm syz.4.5444: invalid indirect mapped block 4294967295 (level 0)
[  596.786133][T20153] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  596.786785][T20153] EXT4-fs (loop4): Remounting filesystem read-only
[  596.787153][T20153] EXT4-fs (loop4): 1 orphan inode deleted
[  596.787170][T20153] EXT4-fs (loop4): 1 truncate cleaned up
[  596.794002][T20153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  596.864618][T20153] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #2: comm syz.4.5444: directory missing '..'
[  597.047132][ T5651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  597.579856][T20176] loop6: detected capacity change from 0 to 16
[  597.587778][T20176] erofs (device loop6): mounted with root inode @ nid 36.
[  597.595148][T20176] syz.6.5454: attempt to access beyond end of device
[  597.595148][T20176] loop6: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16
[  597.618013][T20176] syz.6.5454: attempt to access beyond end of device
[  597.618013][T20176] loop6: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16
[  597.628412][   T34] audit: type=1800 audit(1794369245.862:262): pid=20176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5454" name="file1" dev="loop6" ino=86 res=0 errno=-5
[  598.225664][T20189] loop1: detected capacity change from 0 to 256
[  598.287948][T20168] loop4: detected capacity change from 0 to 32768
[  598.351966][T20168] 
[  598.351966][T20168]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  598.351966][T20168] 
[  598.391203][T20168] ERROR: (device loop4): diWrite: ixpxd invalid
[  598.391203][T20168] 
[  598.401160][T20168] ERROR: (device loop4): txCommit: 
[  598.401160][T20168] 
[  598.681791][ T5651] 
[  598.681791][ T5651]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  598.681791][ T5651] 
[  598.682109][ T5651] 
[  598.682109][ T5651]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  598.682109][ T5651] 
[  598.716002][T20198] loop1: detected capacity change from 0 to 512
[  598.764240][T20198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  598.764368][T20198] ext4 filesystem being mounted at /1154/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  598.879877][T20198] EXT4-fs error (device loop1): ext4_get_first_dir_block:3521: inode #12: comm syz.1.5464: Directory block failed checksum
[  599.034857][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.365804][T20196] loop5: detected capacity change from 0 to 32768
[  599.373999][T20194] loop9: detected capacity change from 0 to 32768
[  599.392425][T20196] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5463 (20196)
[  599.431606][T20196] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  599.431646][T20196] BTRFS info (device loop5): using sha256 checksum algorithm
[  599.618333][T20196] BTRFS info (device loop5 state E): enabling free space tree
[  599.618366][T20196] BTRFS info (device loop5 state E): force clearing of disk cache
[  599.618405][T20196] BTRFS info (device loop5 state E): ignoring unknown super block flags
[  599.789701][T20210] loop1: detected capacity change from 0 to 32768
[  599.864030][T13320] BTRFS info (device loop5 state E): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  599.937666][T20210] jfs_rename did not expect dtDelete to return rc = -2
[  599.937693][T20210] ERROR: (device loop1): jfs_rename: 
[  599.937693][T20210] 
[  599.942195][T20210] ERROR: (device loop1): remounting filesystem as read-only
[  600.303624][T20232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5473'.
[  600.911992][T20243] loop4: detected capacity change from 0 to 512
[  600.925142][T20243] EXT4-fs (loop4): 1 orphan inode deleted
[  600.927138][T20243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  601.197938][T20243] EXT4-fs: Can't set or change test_dummy_encryption on remount
[  601.248125][T20255] tipc: Started in network mode
[  601.248164][T20255] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  601.248491][T20255] tipc: Enabled bearer <eth:batadv0>, priority 10
[  601.309881][ T5651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  601.349810][T20234] loop9: detected capacity change from 0 to 32768
[  601.424887][T20234] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  601.689807][T20234] XFS (loop9): Ending clean mount
[  601.708939][T20234] XFS (loop9): Quotacheck needed: Please wait.
[  601.913915][T20267] loop5: detected capacity change from 0 to 32768
[  601.964856][T20267] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  602.013776][T20234] XFS (loop9): Quotacheck: Done.
[  602.199537][T20267] XFS (loop5): Ending clean mount
[  602.229241][T20267] XFS (loop5): Quotacheck needed: Please wait.
[  602.235440][T17879] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  602.367562][ T5779] tipc: Node number set to 8432298
[  602.632770][T20267] XFS (loop5): Quotacheck: Done.
[  602.635468][T20271] loop6: detected capacity change from 0 to 32768
[  602.687374][T20271] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5488 (20271)
[  602.769860][T20271] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  602.769902][T20271] BTRFS info (device loop6): using blake2b checksum algorithm
[  602.951960][T20285] loop1: detected capacity change from 0 to 32768
[  602.977306][T13320] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  603.001668][T20285] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  603.017266][T20271] BTRFS info (device loop6): enabling ssd optimizations
[  603.017296][T20271] BTRFS info (device loop6): turning on async discard
[  603.017313][T20271] BTRFS info (device loop6): enabling free space tree
[  603.201544][T20285] XFS (loop1): Ending clean mount
[  603.286343][T14033] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  603.425557][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5493'.
[  603.464854][ T5639] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  603.837164][T20330] loop1: detected capacity change from 0 to 256
[  603.843694][T20330] exfat: Deprecated parameter 'utf8'
[  603.892826][T20330] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  604.156112][T20333] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5496'.
[  604.176914][T20333] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5496'.
[  604.318427][T20337] xt_hashlimit: size too large, truncated to 1048576
[  604.813884][T20349] batadv0: entered promiscuous mode
[  604.814038][T20349] macsec1: entered promiscuous mode
[  604.833941][T20349] 8021q: adding VLAN 0 to HW filter on device macsec1
[  604.854294][T20349] batadv0: left promiscuous mode
[  604.963679][T20354] loop5: detected capacity change from 0 to 1024
[  605.334570][T20361] device-mapper: table: 248:20: ram13 too small for target: start=0, len=12416, dev_size=8192
[  605.334617][T20361] device-mapper: core: Cannot calculate initial queue limits
[  605.334628][T20361] device-mapper: ioctl: unable to set up device queue for new table.
[  605.528983][ T5747] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  605.686213][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5521'.
[  605.702340][ T5747] usb 6-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08
[  605.706096][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.706124][ T5747] usb 6-1: Product: syz
[  605.706139][ T5747] usb 6-1: Manufacturer: syz
[  605.706154][ T5747] usb 6-1: SerialNumber: syz
[  605.883862][ T5768] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  605.965992][T20386] loop9: detected capacity change from 0 to 16
[  606.021284][T20386] erofs (device loop9): mounted with root inode @ nid 36.
[  606.104538][T20365] random: crng reseeded on system resumption
[  606.263195][   T10] usb 6-1: USB disconnect, device number 12
[  606.620731][T20410] xt_hashlimit: max too large, truncated to 1048576
[  606.766909][T20417] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5540'.
[  606.766974][T20417] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5540'.
[  606.836802][T20419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5539'.
[  606.836833][T20419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5539'.
[  606.836860][T20419] netlink: 'syz.1.5539': attribute type 18 has an invalid length.
[  606.968849][ T5768] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  606.973878][ T5768] ath9k_htc: Failed to initialize the device
[  606.986809][   T10] usb 6-1: ath9k_htc: USB layer deinitialized
[  607.633819][T20460] ubi4: attaching mtd0
[  607.633908][T20460] ubi4 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66)
[  608.445924][T20498] Bluetooth: hci0: unsupported parameter 5135
[  608.445953][T20498] Bluetooth: hci0: unsupported parameter 8192
[  608.445967][T20498] Bluetooth: hci0: unsupported parameter 5135
[  608.445980][T20498] Bluetooth: hci0: unsupported parameter 8192
[  608.729775][T20506] nbd: socks must be embedded in a SOCK_ITEM attr
[  608.810417][T20464] loop6: detected capacity change from 0 to 32768
[  608.890311][T20464] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  608.994654][T20464] XFS (loop6): Ending clean mount
[  609.037218][T20464] XFS (loop6): Quotacheck needed: Please wait.
[  609.379693][T20464] XFS (loop6): Quotacheck: Done.
[  609.462877][T14033] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  609.541463][T20526] loop1: detected capacity change from 0 to 256
[  609.542478][T20526] exfat: Deprecated parameter 'utf8'
[  609.542561][T20526] exfat: Deprecated parameter 'namecase'
[  609.542661][T20526] exfat: Deprecated parameter 'namecase'
[  609.542693][T20526] exfat: Deprecated parameter 'utf8'
[  609.594531][T20526] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  609.594895][T20526] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[  609.760306][   T33] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  609.933301][   T33] usb 6-1: unable to get BOS descriptor or descriptor too short
[  609.933361][   T33] usb 6-1: New USB device found: idVendor=0025, idProduct=0000, bcdDevice=0.00
[  609.933399][   T33] usb 6-1: no configurations
[  609.933413][   T33] usb 6-1: can't read configurations, error -22
[  610.511145][T20542] loop6: detected capacity change from 0 to 32768
[  610.600252][T20553] netlink: 'syz.1.5600': attribute type 2 has an invalid length.
[  610.967839][T20565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5607'.
[  610.972694][T20565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5607'.
[  611.042575][T20569] netdevsim netdevsim9 netdevsim0: entered promiscuous mode
[  611.043993][T20568] netdevsim netdevsim9 netdevsim0: left promiscuous mode
[  611.359589][T20577] loop6: detected capacity change from 0 to 64
[  611.386666][T20563] loop5: detected capacity change from 0 to 32768
[  611.395527][T20563] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5605 (20563)
[  611.426982][T20563] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  611.427021][T20563] BTRFS info (device loop5): using blake2b checksum algorithm
[  611.662641][T20563] BTRFS info (device loop5): enabling ssd optimizations
[  611.662674][T20563] BTRFS info (device loop5): turning on async discard
[  611.662692][T20563] BTRFS info (device loop5): enabling free space tree
[  611.841017][T20603] ip_tables: iptables: counters copy to user failed while replacing table
[  611.872159][T13320] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  612.032892][   T33] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  612.143051][T20609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5619'.
[  612.208587][   T33] usb 2-1: New USB device found: idVendor=056e, idProduct=011c, bcdDevice=0.00
[  612.209949][   T33] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  612.209996][   T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.250467][   T33] usb 2-1: config 0 descriptor??
[  612.724786][   T33] elecom 0003:056E:011C.002C: item fetching failed at offset 2/40
[  612.725671][   T33] elecom 0003:056E:011C.002C: probe with driver elecom failed with error -22
[  612.932397][   T33] usb 2-1: USB disconnect, device number 23
[  613.263538][T20647] loop5: detected capacity change from 0 to 256
[  614.160896][T20637] loop9: detected capacity change from 0 to 65536
[  614.196172][T20637] XFS (loop9): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[  614.245159][T20637] XFS (loop9): Ending clean mount
[  614.397014][T20690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5655'.
[  614.409517][T20690] batadv0: entered promiscuous mode
[  614.409716][T20690] macsec2: entered promiscuous mode
[  614.409977][T20690] macsec2: entered allmulticast mode
[  614.409994][T20690] batadv0: entered allmulticast mode
[  614.411484][T20690] 8021q: adding VLAN 0 to HW filter on device macsec2
[  614.413314][T20690] batadv0: left allmulticast mode
[  614.413592][T20690] batadv0: left promiscuous mode
[  614.463358][T17879] XFS (loop9): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[  614.501028][T20692] loop1: detected capacity change from 0 to 512
[  614.566540][T20692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  614.566670][T20692] ext4 filesystem being mounted at /1201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  614.692805][T20692] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz.1.5654: Directory block failed checksum
[  614.831430][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.176332][T20706] loop4: detected capacity change from 0 to 16
[  615.185157][T20706] erofs (device loop4): mounted with root inode @ nid 36.
[  615.226248][T20706] erofs (device loop4): readahead error at folio 2 @ nid 89
[  615.226279][T20706] erofs (device loop4): readahead error at folio 1 @ nid 89
[  615.226299][T20706] erofs (device loop4): readahead error at folio 0 @ nid 89
[  615.226328][T20706] erofs (device loop4): read error -117 @ 0 of nid 89
[  615.226536][   T34] audit: type=1800 audit(1794369263.452:263): pid=20706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5661" name="file2" dev="loop4" ino=89 res=0 errno=-117
[  615.235650][T20706] erofs (device loop4): read error -117 @ 0 of nid 89
[  615.461139][   T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  615.525631][T20719] gretap0: entered promiscuous mode
[  615.525852][T20719] macvlan2: entered promiscuous mode
[  615.536091][T20719] gretap0: left promiscuous mode
[  615.614381][   T10] usb 10-1: unable to get BOS descriptor or descriptor too short
[  615.614441][   T10] usb 10-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00
[  615.622293][   T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  615.626781][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  615.626806][   T10] usb 10-1: Product: syz
[  615.626820][   T10] usb 10-1: Manufacturer: syz
[  615.661214][   T10] uvcvideo 10-1:1.0: Found UVC 1.00 device syz (8086:0ad2)
[  615.699553][T20726] loop5: detected capacity change from 0 to 512
[  615.776433][T20726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  615.835630][T20726] EXT4-fs (loop5): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  615.975475][T13320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.292419][   T10] uvcvideo 10-1:1.1: Failed to set UVC probe control : -71 (exp. 26).
[  616.293782][   T10] uvcvideo 10-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  616.293850][   T10] uvcvideo 10-1:1.1: Failed to initialize the device (-71).
[  616.294629][   T10] uvcvideo 10-1:1.0: probe with driver uvcvideo failed with error -71
[  616.354134][   T10] usb 10-1: USB disconnect, device number 7
[  616.590479][T20748] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0
[  616.857672][T20756] loop1: detected capacity change from 0 to 1024
[  617.147010][T20763] loop9: detected capacity change from 0 to 512
[  617.210796][T20763] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  617.210955][T20763] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  617.332900][T17879] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.691762][T20788] [U] ^C
[  618.235952][T20781] loop9: detected capacity change from 0 to 32768
[  618.272491][T20781] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  618.387737][T20781] XFS (loop9): Ending clean mount
[  618.496858][T17879] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  618.675021][T20786] loop1: detected capacity change from 0 to 40427
[  618.705864][T20786] F2FS-fs (loop1): invalid crc value
[  618.783759][T20827] macsec2: entered promiscuous mode
[  618.783786][T20827] macsec2: entered allmulticast mode
[  618.922857][T20786] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  619.013080][T20786] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  619.058853][T20834] ip_tables: iptables: counters copy to user failed while replacing table
[  619.153704][T20837] loop9: detected capacity change from 0 to 4096
[  619.165645][T20837] EXT4-fs: Ignoring removed i_version option
[  619.165673][T20837] EXT4-fs: Ignoring removed mblk_io_submit option
[  619.191973][T20837] EXT4-fs (loop9): Test dummy encryption mode enabled
[  619.209331][T20837] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.337167][T20837] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  619.522614][T17879] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.741952][T20844] fuseblk: block size(6144) > page size(4096) not supported by filesystem
[  619.986361][T20860] loop9: detected capacity change from 0 to 64
[  619.992227][T20853] ip_tables: iptables: counters copy to user failed while replacing table
[  620.030582][T20860] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.	Mounting read-only.
[  620.283650][T20869] netlink: 7 bytes leftover after parsing attributes in process `syz.9.5729'.
[  620.543825][T20879] loop9: detected capacity change from 0 to 512
[  620.568329][T20879] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  620.568352][T20879] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  620.600767][T20879] EXT4-fs (loop9): 1 truncate cleaned up
[  620.602742][T20879] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  620.656491][T20884] loop4: detected capacity change from 0 to 1024
[  620.665450][T20884] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  620.665481][T20884] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  620.665583][T20884] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  620.684616][T20884] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #3: comm syz.4.5736: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  620.684663][T20884] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  620.687465][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  620.687485][    C0] EXT4-fs (loop4): initial error at time 1794369268: ext4_ext_check_inode:521: inode 3
[  620.687515][    C0] EXT4-fs (loop4): last error at time 1794369268: ext4_ext_check_inode:521: inode 3
[  620.689259][T20884] EXT4-fs (loop4): no journal found
[  620.689276][T20884] EXT4-fs (loop4): can't get journal size
[  620.710896][T20884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  620.815623][ T5651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.969282][T17879] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.024971][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5739'.
[  621.041711][T20893] ip6gre1: entered allmulticast mode
[  621.112481][T20895] [U] 
[  621.112499][T20895] [U] K{‘
[  621.112511][T20895] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç
[  621.112535][T20895] [U] tžØ–/,�~ˆÄœ­‹jõÿÊ}8îÊþ'o1�Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î¾ª(È5ˆObü¤‡ÍƒJÖ
[  621.112556][T20895] [U] ±k\&—}6£6œXîHX�¥ôµ„Ìþ.`¸a“$Û40|϶¿�9°øÞ¨„¯ÀÏU‚ò4�ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’4”ÿ
[  621.112591][T20895] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØI�n¨™[Z(•„C|Të]z{�â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJø�SH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž�÷éwUh„fN—Ž�Çhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<ã	¢Ø°‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿c�Õ³žV¦=�‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI
˜¢œaïì6-úD�úV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯
Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå
[  621.112646][T20895] [U] 	+�w‰G?]£Ó'a:	»Ú)Õ
ïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:�^0À�téèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj×;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼�Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿Bĵٜ Nóy"vI2ûÌ
[  621.112673][T20895] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ�°¶ºqîÙ
 ŸÇ3‹Æq¯ôN^HP*½Ü$	µ.Î7yÓ±œ2³
[  621.112691][T20895] [U] ½?�©ÿhüä*ÙÁ”Î3í�7Üé�¾^#Q�"0~‡‚ð(éoïXLŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ
[  621.112717][T20895] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“�®ŸŸñ�2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä�„RTÔ¶ŒBÚ[+/<<R�B�Êäõ|ФeŽžÑÛ –V96#ûúÑͤê¦jºUº%
s851ƒ�þÒ©s�P±¨\£ƒ?qª|L�´QXµ0ÂKÔ1orÉ´2¡½|ÖüdÖFÌ¿»ù�ÚË2Þ”–¨×0ÌåH•}C[/¤»“Ÿpx^¼èo
[  621.112759][T20895] [U] ÖØ›·Ü—(JÅЛ•§mÛüxz˜;œ½±ÓÿØ�_¹»µÔ*3÷3…ß5¸\ƒxm³ÚU�‰AK!aQ`ßË;Fð•�I+ÖÐVUHåðÂmÑj³´Æ·ÙÛZÄcøãz‹¼Â)_矡	ô‘¡&ÿö¡ÿáaÇxtoÈÝê_½ ú¼¦:¨â×%à²Pò×ÈCö²‚yö+_þü›ýû}Uïm˜ƒÆ«CÅ!KJò7Ðßg¯Ë=bè
[  621.112806][T20895] [U] Ù½¥Fœ%ŽXAÙÂlŸ2r*gŒòVW¬Ñ$ƒüj	ãA˜›F¶ß�·+ø¾9Í„ViºÖ—¼kÙ¾Å1}_©â
á¥%Ãr6„•(]“¦/Ÿ¶ø�Å™YܺÇÞh㤾üÑr gªÄrn/Ü«Î#!êdÙûÚ«%ÞÛËDªï-{ð$þvU‘ýT²¼ª$:mtrÔEŽC1V‰D~îÈ];[˜ËÚÐ÷sq¾¯œù(ìëe,X¦8â"Ù
æðG¥dŸúµ2@T8ž¾´òƒàðÿàt8.Rc+Ä@Ëꦇp‡uá
p”‰¼¶C±‡Ë'å„yLÓ-Ss1E?Å7ÓO‡§ì^]¦†Âóc”â½H]§Jkr]Rkq܆�øÝ£þ´OTcôÆx¶¨¾4™NË	³Ï&�á­ðÚ‹ŠÓ@¶:m7ß~�+”W*ÛÁ–xMüó>>—¡{q¢Ú×
_²Õ�LX8ÊU„ÇØî{ðZ³íø�)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ�„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q	ìDWŸòø¸=ؽ|q¬	ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE�`ƦM¢Xîâ"ä\
[  621.112847][T20895] [U] {;Žõ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_  HPϱœSªD­�¦ø:]‚{Ë©ÔÝæè½
[  621.112865][T20895] [U] I,Ç>Çó¤	îÙ5�1ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼Š�Vˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ
[K@ÑëÄü2çǬ–®¡p"^`Á‰í	øß
[  621.112880][T20895] [U] 22½“Æ©Ðû©x?0;3u±
[  621.112902][T20895] [U] ÞœÕ
æ�ósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_
•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË,	‘Ä	þD~×d©£¡+Ãw;A\˜F
PÉþȘ|$ºø)�
KØ�I³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ	ÝíßËae©�tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç
[  621.112928][T20895] [U] [ª['xn€'²÷á¿Ü,mr¦«/žšœâ1D=!DŽx91Bù
wç»R—lf…ƒÆKì¤Zõê# `ì‘lØ›§Ëœ»×b~åmÒÔÖ
[  621.112943][T20895] [U] ™LÖ>�ñ�d+ˆd¯§—®Ì"5Žê��h3<ª¨ÅiR=F^”f�nõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ
[  621.112956][T20895] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW��]ôÊäì©�
[  621.112972][T20895] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSk�YÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ
[  621.112994][T20895] [U] ¹ec�
[  621.113009][T20895] [U] �—”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·�Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µŽçIÛRió�pmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ
[  621.114946][T20891] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ@BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUd
Ç©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx�™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ
[  621.263975][T20890] rxe_eth0 speed is unknown, defaulting to 1000
[  621.585399][T20900] loop5: detected capacity change from 0 to 4096
[  621.662656][T20900] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  621.662691][T20900] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  621.775914][ T1171] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  621.776035][T13320] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  621.776058][T13320] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  621.776075][T13320] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  621.776712][ T1171] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  622.206115][T20905] device-mapper: table: 248:25: crypt: Device lookup failed (-ENOENT)
[  622.206148][T20905] device-mapper: ioctl: error adding target to table
[  622.362826][T20913] device-mapper: table: 248:21: crypt: Error decoding and setting key (-EINVAL)
[  622.362857][T20913] device-mapper: ioctl: error adding target to table
[  623.007885][T20935] loop4: detected capacity change from 0 to 4096
[  623.060338][T20938] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  623.318813][T20922] loop5: detected capacity change from 0 to 32768
[  623.363640][T20922] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  623.579552][T20922] XFS (loop5): Ending clean mount
[  623.607260][T20959] loop9: detected capacity change from 0 to 512
[  623.620286][T20959] EXT4-fs (loop9): Test dummy encryption mode enabled
[  623.627910][T20959] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  623.656954][T20959] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  623.714606][T13320] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  623.765830][T20959] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  623.826115][T20959] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters
[  623.985158][T20959] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  624.054526][T17879] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  624.252429][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  624.252506][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  624.287581][T20964] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5763'.
[  624.672683][T20981] team0: Device vlan2 is already an upper device of the team interface
[  625.199386][T20984] loop5: detected capacity change from 0 to 32768
[  625.243893][T20984] XFS (loop5): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[  625.397365][T13320] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  625.676360][T21013] loop1: detected capacity change from 0 to 2048
[  625.756139][T20992] loop9: detected capacity change from 0 to 32768
[  625.858795][T21013]  loop1: p1 < > p4
[  625.858817][T21013] loop1: partition table partially beyond EOD, truncated
[  625.865278][T21013] loop1: p4 start 3025664 is beyond EOD, truncated
[  626.002760][T15478] udevd[15478]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  626.594997][T21036] Bluetooth: MGMT ver 1.23
[  626.621516][T21041] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5798'.
[  626.637199][T21042] loop9: detected capacity change from 0 to 256
[  626.749750][T21044] loop6: detected capacity change from 0 to 2048
[  626.798935][T21044] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  626.833361][T21048] loop1: detected capacity change from 0 to 1024
[  626.866771][   T34] audit: type=1800 audit(1794369275.092:264): pid=21044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5797" name="file1" dev="loop6" ino=1367 res=0 errno=-22
[  626.946691][T21048] hfsplus: invalid length 1280 has been corrected to 255
[  627.003714][T21050] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes
[  627.325800][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5805'.
[  627.368943][T21062] loop4: detected capacity change from 0 to 1024
[  627.398209][T21062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  627.434271][ T5651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.825500][T21080] Bluetooth: hci0: invalid length 0, exp 2 for type 20
[  628.276019][T21101] loop6: detected capacity change from 0 to 512
[  628.276484][T21103] netlink: 5 bytes leftover after parsing attributes in process `syz.9.5826'.
[  628.276860][T21103] xt_IDLETIMER: label is empty or not nul-terminated
[  628.329945][T21101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  628.330066][T21101] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  628.348475][ T1243] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  628.482853][T14033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.530852][ T1243] usb 2-1: New USB device found: idVendor=054c, idProduct=024b, bcdDevice=0.00
[  628.532894][ T1243] usb 2-1: config 0 interface 0 has no altsetting 0
[  628.532937][ T1243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.538431][ T1243] usb 2-1: config 0 descriptor??
[  628.836194][T21124] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5835'.
[  628.836231][T21124] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5835'.
[  628.981556][ T1243] sony 0003:054C:024B.002D: unexpected long global item
[  628.982412][ T1243] sony 0003:054C:024B.002D: parse failed
[  628.982525][ T1243] sony 0003:054C:024B.002D: probe with driver sony failed with error -22
[  629.198555][ T1243] usb 2-1: USB disconnect, device number 24
[  629.270634][T21138] loop6: detected capacity change from 0 to 512
[  629.281241][T21138] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  629.281260][T21138] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  629.315752][T21138] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #16: comm syz.6.5841: invalid indirect mapped block 32768 (level 2)
[  629.315796][T21138] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  629.329878][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  629.329907][    C1] EXT4-fs (loop6): initial error at time 1794369277: ext4_free_branches:1040: inode 16
[  629.329942][    C1] EXT4-fs (loop6): last error at time 1794369277: ext4_free_branches:1040: inode 16
[  629.384032][T21138] EXT4-fs (loop6): 1 orphan inode deleted
[  629.384052][T21138] EXT4-fs (loop6): 1 truncate cleaned up
[  629.385105][T21138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  629.427031][T21138] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  629.458721][   T34] audit: type=1804 audit(1794369277.682:265): pid=21138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5841" name="/newroot/469/file2/file2" dev="loop6" ino=16 res=1 errno=0
[  629.517668][T14033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.559541][T21120] loop9: detected capacity change from 0 to 32768
[  633.241596][T21158] loop9: detected capacity change from 0 to 64
[  633.425148][T21164] loop1: detected capacity change from 0 to 4096
[  633.455839][T21164] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  633.610725][T21164] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  633.610761][T21164] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  633.640288][T21169] loop4: detected capacity change from 0 to 512
[  633.674820][T21169] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  633.674842][T21169] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  633.725154][T21169] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #16: comm syz.4.5854: invalid indirect mapped block 32768 (level 2)
[  633.725197][T21169] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  633.727467][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  633.727493][    C0] EXT4-fs (loop4): initial error at time 1794369281: ext4_free_branches:1040: inode 16
[  633.727525][    C0] EXT4-fs (loop4): last error at time 1794369281: ext4_free_branches:1040: inode 16
[  633.729783][T21169] EXT4-fs (loop4): 1 orphan inode deleted
[  633.729804][T21169] EXT4-fs (loop4): 1 truncate cleaned up
[  633.736378][T21169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  634.006948][ T5651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.046770][   T87] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  634.047859][ T5639] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  634.047887][ T5639] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  634.047904][ T5639] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  634.104857][   T87] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  634.355606][T21191] ip_tables: iptables: counters copy to user failed while replacing table
[  634.615165][T21199] loop1: detected capacity change from 0 to 512
[  634.629801][T21199] EXT4-fs: Ignoring removed oldalloc option
[  634.629857][T21199] EXT4-fs: Ignoring removed i_version option
[  634.632692][T21199] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  634.655464][T21199] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem
[  634.655494][T21199] loop1: lost filesystem error report for type 5 error -117
[  634.657800][    C0] EXT4-fs (loop1): initial error at time 1794369282: ext4_process_orphan:346
[  634.657835][    C0] EXT4-fs (loop1): last error at time 1794369282: ext4_process_orphan:346
[  634.783964][T21199] EXT4-fs (loop1): 2 truncates cleaned up
[  634.788325][T21199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  634.817605][ T5747] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  634.835211][T21199] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1341: inode #12: block 7: comm syz.1.5868: path /1239/file0/file0: bad entry in directory: directory entry overrun - offset=64, inode=0, rec_len=1024, size=60 fake=0
[  634.961790][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.008494][ T5747] usb 10-1: New USB device found: idVendor=17ef, idProduct=61ae, bcdDevice=0.00
[  635.012705][ T5747] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  635.012740][ T5747] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  635.012768][ T5747] usb 10-1: config 0 interface 0 has no altsetting 0
[  635.012805][ T5747] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.017124][ T5747] usb 10-1: config 0 descriptor??
[  635.219086][T21210] loop1: detected capacity change from 0 to 8
[  635.292424][T21210] SQUASHFS error: Unable to read inode 0x87
[  635.305540][T21172] loop5: detected capacity change from 0 to 40427
[  635.324658][T21172] F2FS-fs (loop5): build fault injection rate: 174
[  635.324684][T21172] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  635.330340][T21172] F2FS-fs (loop5): invalid crc value
[  635.499489][ T5747] lenovo 0003:17EF:61AE.002E: ignoring exceeding usage max
[  635.531537][ T5747] input: HID 17ef:61ae as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:17EF:61AE.002E/input/input33
[  635.579619][ T5747] lenovo 0003:17EF:61AE.002E: input,hidraw0: USB HID v0.10 Joystick [HID 17ef:61ae] on usb-dummy_hcd.9-1/input0
[  635.737230][T21172] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  635.810815][T21172] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  635.833706][   T10] usb 10-1: USB disconnect, device number 8
[  635.864470][T21216] fido_id[21216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory
[  635.940454][T13320] syz-executor: attempt to access beyond end of device
[  635.940454][T13320] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  635.967149][T13320] CPU: 1 UID: 0 PID: 13320 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  635.967183][T13320] Tainted: [L]=SOFTLOCKUP
[  635.967191][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  635.967203][T13320] Call Trace:
[  635.967212][T13320]  <TASK>
[  635.967221][T13320]  dump_stack_lvl+0xe8/0x150
[  635.967270][T13320]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  635.967303][T13320]  f2fs_write_end_bio+0xf7d/0x1310
[  635.967345][T13320]  __submit_merged_bio+0x258/0x6a0
[  635.967370][T13320]  ? rcu_is_watching+0x16/0xb0
[  635.967401][T13320]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  635.967427][T13320]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  635.967477][T13320]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  635.967517][T13320]  ? __lock_acquire+0x747/0x2de0
[  635.967562][T13320]  ? __lock_acquire+0x747/0x2de0
[  635.967588][T13320]  ? __lock_acquire+0x747/0x2de0
[  635.967612][T13320]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  635.967679][T13320]  ? rcu_is_watching+0x16/0xb0
[  635.967699][T13320]  ? rcu_is_watching+0x16/0xb0
[  635.967714][T13320]  ? __kasan_check_byte+0x12/0x40
[  635.967748][T13320]  ? is_bpf_text_address+0x292/0x2b0
[  635.967770][T13320]  ? is_bpf_text_address+0x26/0x2b0
[  635.967794][T13320]  ? kernel_text_address+0xa5/0xe0
[  635.967820][T13320]  ? __kernel_text_address+0xd/0x30
[  635.967842][T13320]  ? unwind_get_return_address+0x4d/0x90
[  635.967867][T13320]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  635.967891][T13320]  ? arch_stack_walk+0xfb/0x150
[  635.967928][T13320]  ? stack_trace_save+0xa9/0x100
[  635.967952][T13320]  ? __pfx_stack_trace_save+0x10/0x10
[  635.967979][T13320]  ? check_path+0x21/0x40
[  635.968001][T13320]  ? add_lock_to_list+0xc7/0x100
[  635.968020][T13320]  ? lockdep_unlock+0x5c/0xd0
[  635.968039][T13320]  ? __lock_acquire+0x1511/0x2de0
[  635.968092][T13320]  ? do_raw_spin_lock+0x12b/0x2f0
[  635.968123][T13320]  ? do_raw_spin_unlock+0xf5/0x200
[  635.968144][T13320]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  635.968172][T13320]  do_writepages+0x338/0x560
[  635.968205][T13320]  ? do_raw_spin_unlock+0xf5/0x200
[  635.968230][T13320]  filemap_fdatawrite+0x1e9/0x2f0
[  635.968255][T13320]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  635.968332][T13320]  ? do_raw_spin_unlock+0xf5/0x200
[  635.968356][T13320]  f2fs_sync_dirty_inodes+0x471/0x970
[  635.968401][T13320]  f2fs_write_checkpoint+0x867/0x24d0
[  635.968458][T13320]  kill_f2fs_super+0x2df/0x700
[  635.968490][T13320]  ? rcu_do_enqueue+0x60d/0x870
[  635.968512][T13320]  ? lockdep_hardirqs_on+0x7b/0x110
[  635.968536][T13320]  ? __pfx_kill_f2fs_super+0x10/0x10
[  635.968579][T13320]  ? __pfx_call_rcu+0x10/0x10
[  635.968603][T13320]  ? shrinker_free+0x2a7/0x3b0
[  635.968626][T13320]  deactivate_locked_super+0xbe/0x110
[  635.968652][T13320]  cleanup_mnt+0x204/0x2a0
[  635.968674][T13320]  task_work_run+0x1d9/0x260
[  635.968700][T13320]  ? __pfx_task_work_run+0x10/0x10
[  635.968733][T13320]  exit_to_user_mode_loop+0x204/0x770
[  635.968757][T13320]  ? rcu_is_watching+0x16/0xb0
[  635.968779][T13320]  do_syscall_64+0x336/0x540
[  635.968800][T13320]  ? trace_irq_disable+0x3b/0x140
[  635.968815][T13320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.968833][T13320]  ? clear_bhb_loop+0x70/0xc0
[  635.968856][T13320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.968873][T13320] RIP: 0033:0x00007f21713aa157
[  635.968894][T13320] Code: a2 c7 05 9c 25 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  635.968909][T13320] RSP: 002b:00007fffb71b4748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  635.968930][T13320] RAX: 0000000000000000 RBX: 00007f2171437363 RCX: 00007f21713aa157
[  635.968942][T13320] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb71b4800
[  635.968952][T13320] RBP: 00007fffb71b4800 R08: 00007fffb71b5800 R09: 00000000ffffffff
[  635.968964][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb71b5890
[  635.968975][T13320] R13: 00007f2171437363 R14: 000000000009b5b0 R15: 00007fffb71b58d0
[  635.969007][T13320]  </TASK>
[  636.116326][T13320] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  636.714190][T21239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x733a instead
[  636.714222][T21239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x3a31 instead
[  636.714239][T21239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x3030 instead
[  636.714256][T21239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x3030 instead
[  636.714273][T21239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x3030 instead
[  636.714292][T21239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x3030 instead
[  636.714309][T21239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3336 instead
[  636.714327][T21239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x663a instead
[  636.714345][T21239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x0033 instead
[  636.714362][T21239] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x23aa instead
[  636.714379][T21239] jffs2: Further such events for this erase block will not be printed
[  636.714462][T21239] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  636.714473][T21239] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[  636.908106][ T5747] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  637.068049][ T5747] usb 2-1: Using ep0 maxpacket: 32
[  637.069016][ T5747] usb 2-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  637.072165][ T5747] usb 2-1: config 32 has an invalid interface number: 85 but max is 0
[  637.072193][ T5747] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  637.072214][ T5747] usb 2-1: config 32 has no interface number 0
[  637.072257][ T5747] usb 2-1: config 32 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  637.072287][ T5747] usb 2-1: config 32 interface 85 has no altsetting 0
[  637.074495][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.074522][ T5747] usb 2-1: Product: syz
[  637.074537][ T5747] usb 2-1: Manufacturer: syz
[  637.074553][ T5747] usb 2-1: SerialNumber: syz
[  637.162838][T21255] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5890'.
[  637.182504][ T5747] appletouch 2-1:32.85: Could not find int-in endpoint
[  637.182534][ T5747] appletouch 2-1:32.85: probe with driver appletouch failed with error -5
[  637.183378][ T5747] usbhid 2-1:32.85: couldn't find an input interrupt endpoint
[  637.735155][T21257] loop5: detected capacity change from 0 to 32768
[  637.774772][T21257] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  637.925561][T21257] XFS (loop5): Ending clean mount
[  637.943780][T21257] XFS (loop5): Quotacheck needed: Please wait.
[  638.199228][T21257] XFS (loop5): Quotacheck: Done.
[  638.235657][T21291] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in;
[  638.235657][T21291]    program syz.9.5904 not setting count and/or reply_len properly
[  638.370627][T21287] loop4: detected capacity change from 0 to 32768
[  638.404757][T21287] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  638.431236][T13320] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  638.664144][T21287] XFS (loop4): Ending clean mount
[  638.675662][T21287] XFS (loop4): Quotacheck needed: Please wait.
[  638.952413][T21287] XFS (loop4): Quotacheck: Done.
[  639.021467][ T5651] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  639.297055][T21319] loop6: detected capacity change from 0 to 16
[  639.329925][T21319] erofs (device loop6): mounted with root inode @ nid 36.
[  639.403509][T21319] syz.6.5914: attempt to access beyond end of device
[  639.403509][T21319] loop6: rw=8912896, sector=36, nr_sectors = 1 limit=16
[  639.410008][T21319] syz.6.5914: attempt to access beyond end of device
[  639.410008][T21319] loop6: rw=8912896, sector=131156, nr_sectors = 1 limit=16
[  639.410577][T21319] syz.6.5914: attempt to access beyond end of device
[  639.410577][T21319] loop6: rw=8912896, sector=36, nr_sectors = 1 limit=16
[  639.410737][T21319] syz.6.5914: attempt to access beyond end of device
[  639.410737][T21319] loop6: rw=8912896, sector=131157, nr_sectors = 1 limit=16
[  639.410872][T21319] syz.6.5914: attempt to access beyond end of device
[  639.410872][T21319] loop6: rw=8912896, sector=41, nr_sectors = 1 limit=16
[  639.412504][T21319] syz.6.5914: attempt to access beyond end of device
[  639.412504][T21319] loop6: rw=8912896, sector=65623, nr_sectors = 1 limit=16
[  639.414311][T21319] syz.6.5914: attempt to access beyond end of device
[  639.414311][T21319] loop6: rw=8912896, sector=46, nr_sectors = 1 limit=16
[  639.414462][T21319] syz.6.5914: attempt to access beyond end of device
[  639.414462][T21319] loop6: rw=8912896, sector=131168, nr_sectors = 1 limit=16
[  639.414578][T21319] syz.6.5914: attempt to access beyond end of device
[  639.414578][T21319] loop6: rw=8912896, sector=86, nr_sectors = 1 limit=16
[  639.695888][   T10] usb 2-1: USB disconnect, device number 25
[  639.856459][T21330] netlink: 'syz.1.5919': attribute type 9 has an invalid length.
[  639.892727][T21331] loop4: detected capacity change from 0 to 512
[  639.955409][T21331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  639.955539][T21331] ext4 filesystem being mounted at /1241/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  640.035635][T21331] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz.4.5918: Directory block failed checksum
[  640.082903][T21325] loop5: detected capacity change from 0 to 32768
[  640.107254][T21325] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  640.162826][T21325] XFS (loop5): Ending clean mount
[  640.234402][T21347] loop6: detected capacity change from 0 to 512
[  640.236054][T13320] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  640.239811][ T5651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  640.403318][T21347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  640.403443][T21347] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  640.751434][T14033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.221309][ T5779] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  641.368894][ T5779] usb 2-1: Using ep0 maxpacket: 16
[  641.370615][ T5779] usb 2-1: New USB device found: idVendor=045e, idProduct=9994, bcdDevice=fc.3c
[  641.371997][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.372028][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.372052][ T5779] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  641.372097][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.379711][ T5779] usb 2-1: config 0 descriptor??
[  641.442964][T21387] loop6: detected capacity change from 0 to 2048
[  641.530248][T21390] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  641.835320][ T5779] hid-generic 0003:045E:9994.002F: unknown main item tag 0x3
[  641.835359][ T5779] hid-generic 0003:045E:9994.002F: unknown main item tag 0x0
[  641.835492][ T5779] hid-generic 0003:045E:9994.002F: unknown main item tag 0x0
[  641.835519][ T5779] hid-generic 0003:045E:9994.002F: unknown main item tag 0x0
[  641.835546][ T5779] hid-generic 0003:045E:9994.002F: unknown main item tag 0x0
[  641.835571][ T5779] hid-generic 0003:045E:9994.002F: unknown main item tag 0x0
[  641.835595][ T5779] hid-generic 0003:045E:9994.002F: unknown main item tag 0x0
[  641.835621][ T5779] hid-generic 0003:045E:9994.002F: unknown main item tag 0x0
[  641.835647][ T5779] hid-generic 0003:045E:9994.002F: unknown main item tag 0x0
[  641.835672][ T5779] hid-generic 0003:045E:9994.002F: unknown main item tag 0x0
[  641.835792][ T5779] hid-generic 0003:045E:9994.002F: unbalanced collection at end of report description
[  641.842008][ T5779] hid-generic 0003:045E:9994.002F: probe with driver hid-generic failed with error -22
[  642.060684][T14384] usb 2-1: USB disconnect, device number 26
[  642.187946][T21403] loop5: detected capacity change from 0 to 256
[  642.243399][T21405] loop9: detected capacity change from 0 to 512
[  642.256988][T21405] EXT4-fs: Ignoring removed nomblk_io_submit option
[  642.270519][T21405] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  642.277301][T21403] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  642.314461][T21405] EXT4-fs error (device loop9): ext4_orphan_get:1430: comm syz.9.5946: bad orphan inode 13
[  642.314497][T21405] loop9: lost filesystem error report for type 5 error -117
[  642.317539][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  642.317566][    C0] EXT4-fs (loop9): last error at time 1794369290: ext4_orphan_get:1430
[  642.347711][T21405] ext4_test_bit(bit=12, block=18) = 1
[  642.347735][T21405] is_bad_inode(inode)=0
[  642.347744][T21405] NEXT_ORPHAN(inode)=0
[  642.347753][T21405] max_ino=32
[  642.347762][T21405] i_nlink=1
[  642.367043][T21405] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  642.453967][T21405] EXT4-fs error (device loop9): ext4_lookup:1791: inode #2: comm syz.9.5946: deleted inode referenced: 12
[  642.593616][T17879] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  642.832137][T21413] loop5: detected capacity change from 0 to 4096
[  642.896178][T21420] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  643.744607][T21440] loop5: detected capacity change from 0 to 32768
[  643.771634][T21440] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  643.843284][T21440] XFS (loop5): Ending clean mount
[  643.979401][T13320] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  643.988806][T21459] loop4: detected capacity change from 0 to 4096
[  644.024651][T21461] loop1: detected capacity change from 0 to 2048
[  644.070462][T21462] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  644.158753][T21459] ntfs3(loop4): Failed to load $Extend (-22).
[  644.158786][T21459] ntfs3(loop4): Failed to initialize $Extend.
[  644.327236][T21462] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  644.327269][T21462] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  644.331939][T21462] Remounting filesystem read-only
[  644.360730][ T5639] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  644.871973][T21478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5973'.
[  645.091074][T21468] loop1: detected capacity change from 0 to 32768
[  645.097193][T21468] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5968 (21468)
[  645.134709][T21468] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  645.134747][T21468] BTRFS info (device loop1): using blake2b checksum algorithm
[  645.234077][T21487] loop5: detected capacity change from 0 to 4096
[  645.253431][T21468] BTRFS info (device loop1): enabling ssd optimizations
[  645.253467][T21468] BTRFS info (device loop1): turning on async discard
[  645.253483][T21468] BTRFS info (device loop1): enabling free space tree
[  645.253503][T21468] BTRFS info (device loop1): use zstd compression, level 3
[  645.408186][ T5639] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  645.905286][   T33] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  646.083356][   T33] usb 10-1: Using ep0 maxpacket: 16
[  646.094658][   T33] usb 10-1: New USB device found: idVendor=060b, idProduct=500a, bcdDevice=0.00
[  646.101034][   T33] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  646.101067][   T33] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  646.101088][   T33] usb 10-1: config 0 interface 0 has no altsetting 0
[  646.101129][   T33] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.106227][   T33] usb 10-1: config 0 descriptor??
[  646.221471][   T34] audit: type=1400 audit(1794369294.452:266): apparmor="STATUS" operation="profile_load" info="failed to create" error=-2 profile="unconfined" name="//o" pid=21511 comm="syz.1.5983"
[  646.496683][T21501] loop4: detected capacity change from 0 to 32768
[  646.543543][T21501] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  646.642659][T21501] XFS (loop4): Ending clean mount
[  646.733605][   T33] cougar 0003:060B:500A.0030: hidraw0: USB HID v0.00 Device [HID 060b:500a] on usb-dummy_hcd.9-1/input0
[  646.838433][   T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  646.860811][ T5779] usb 10-1: USB disconnect, device number 9
[  646.902556][ T5651] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  646.957320][T21539] fido_id[21539]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory
[  647.004608][   T10] usb 6-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  647.019917][   T10] usb 6-1: config 127 has an invalid interface number: 57 but max is 0
[  647.019949][   T10] usb 6-1: config 127 has no interface number 0
[  647.019994][   T10] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  647.024051][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.024079][   T10] usb 6-1: Product: syz
[  647.024095][   T10] usb 6-1: Manufacturer: syz
[  647.024110][   T10] usb 6-1: SerialNumber: syz
[  647.088939][T21536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  647.522186][T21536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  647.566862][T21554] loop9: detected capacity change from 0 to 256
[  647.621706][   T34] audit: type=1400 audit(1794369295.852:267): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=21552 comm="syz.6.5999" name="unknown" offset=16
[  647.654808][T21554] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  647.726896][   T10] asix 6-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  647.727197][   T10] asix 6-1:127.57: probe with driver asix failed with error -71
[  647.759757][   T10] usb 6-1: USB disconnect, device number 15
[  647.902577][ T4957] block nbd0: Receive control failed (result -32)
[  647.903542][   T56] block nbd0: Receive control failed (result -32)
[  647.929425][ T4957] Bluetooth: hci1: command 0x0406 tx timeout
[  647.982697][T21560] loop6: detected capacity change from 0 to 2048
[  647.997036][T21560] NILFS (loop6): invalid segment: Inconsistency found
[  647.997102][T21560] NILFS (loop6): trying rollback from an earlier position
[  648.037027][T21560] NILFS (loop6): recovery complete
[  648.160155][T21568] loop2: detected capacity change from 0 to 8
[  648.164129][T21568] Dev loop2: unable to read RDB block 8
[  648.164177][T21568]  loop2: unable to read partition table
[  648.164385][T21568] loop2: partition table beyond EOD, truncated
[  648.164403][T21568] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5)
[  648.897910][ T5747] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  649.035848][T21605] netlink: 'syz.5.6021': attribute type 10 has an invalid length.
[  649.045954][T21605] team0: Device vxcan0 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port
[  649.061382][ T5747] usb 10-1: New USB device found: idVendor=0a99, idProduct=0001, bcdDevice=0.00
[  649.072159][ T5747] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  649.072196][ T5747] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  649.074234][ T5747] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  649.074260][ T5747] usb 10-1: Product: syz
[  649.074275][ T5747] usb 10-1: Manufacturer: syz
[  649.124925][ T5747] navman 10-1:1.0: navman converter detected
[  649.134924][ T5747] usb 10-1: navman converter now attached to ttyUSB0
[  649.343059][T21588] navman ttyUSB0: navman_open - failed submitting interrupt urb, error -90
[  649.345299][ T1243] usb 10-1: USB disconnect, device number 10
[  649.363578][ T1243] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  649.396117][ T1243] navman 10-1:1.0: device disconnected
[  651.209816][T21618] loop5: detected capacity change from 0 to 40427
[  651.222592][T21618] F2FS-fs (loop5): invalid crc value
[  651.457797][T21618] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  651.521867][T21618] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  651.524372][T21639] loop1: detected capacity change from 0 to 128
[  651.911218][T21651] program syz.6.6041 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  652.295469][T21669] loop9: detected capacity change from 0 to 64
[  652.366287][T21669] CacheFiles: Failed to register: -95
[  652.682971][T21676] pimreg: tun_chr_ioctl cmd 2147767520
[  652.850828][T21682] loop9: detected capacity change from 0 to 1024
[  652.899058][T21682] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  652.919995][T21682] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  652.950864][T21682] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  653.203960][T17879] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  653.875834][   T34] audit: type=1326 audit(1794369302.102:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.1.6075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  653.876175][   T34] audit: type=1326 audit(1794369302.102:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.1.6075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  653.937368][   T34] audit: type=1326 audit(1794369302.162:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.1.6075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  653.937794][   T34] audit: type=1326 audit(1794369302.172:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.1.6075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  653.938180][   T34] audit: type=1326 audit(1794369302.172:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.1.6075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  653.938411][   T34] audit: type=1326 audit(1794369302.172:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.1.6075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  653.938647][   T34] audit: type=1326 audit(1794369302.172:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.1.6075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  653.939511][   T34] audit: type=1326 audit(1794369302.172:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.1.6075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  653.939565][   T34] audit: type=1326 audit(1794369302.172:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.1.6075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  654.229924][T21736] CacheFiles: Failed to register: -95
[  654.300959][ T1243] kernel write not supported for file /admmidi2 (pid: 1243 comm: kworker/0:2)
[  654.542260][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6087'.
[  654.667707][ T5779] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  654.819245][ T5779] usb 6-1: Using ep0 maxpacket: 8
[  654.820403][ T5779] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  654.822700][ T5779] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  654.822729][ T5779] usb 6-1: config 0 has no interface number 0
[  654.822780][ T5779] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  654.822803][ T5779] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  654.822829][ T5779] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  654.822854][ T5779] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  654.822906][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.925506][ T5779] usb 6-1: config 0 descriptor??
[  654.980435][ T5779] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  655.177101][    C0] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[  655.177144][ T5779] usb 6-1: USB disconnect, device number 16
[  655.206224][ T5779] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  655.306323][T21759] loop1: detected capacity change from 0 to 40427
[  655.321288][T21759] F2FS-fs (loop1): invalid crc value
[  655.522261][T21759] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  655.599469][T21759] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0
[  655.599501][T21759] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  655.599529][T21759] F2FS-fs (loop1): Start checkpoint disabled!
[  655.741936][T21779] ieee802154 phy0 wpan0: encryption failed: -22
[  655.755961][T21759] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0
[  655.767219][T21759] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  656.021369][ T3376] bio_check_eod: 83 callbacks suppressed
[  656.021392][ T3376] kworker/u8:12: attempt to access beyond end of device
[  656.021392][ T3376] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  656.021471][ T3376] CPU: 0 UID: 0 PID: 3376 Comm: kworker/u8:12 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  656.021501][ T3376] Tainted: [L]=SOFTLOCKUP
[  656.021509][ T3376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  656.021524][ T3376] Workqueue: writeback wb_workfn (flush-7:1)
[  656.021560][ T3376] Call Trace:
[  656.021569][ T3376]  <TASK>
[  656.021579][ T3376]  dump_stack_lvl+0xe8/0x150
[  656.021616][ T3376]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  656.021652][ T3376]  f2fs_write_end_bio+0xf7d/0x1310
[  656.021697][ T3376]  __submit_merged_bio+0x258/0x6a0
[  656.021724][ T3376]  ? rcu_is_watching+0x16/0xb0
[  656.021758][ T3376]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  656.021790][ T3376]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  656.021858][ T3376]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  656.021885][ T3376]  ? lock_acquire+0x115/0x350
[  656.021945][ T3376]  ? clockevents_program_event+0x491/0x630
[  656.021977][ T3376]  ? __pfx_clockevents_program_event+0x10/0x10
[  656.022016][ T3376]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  656.022059][ T3376]  ? __schedule+0x1bbb/0x5f70
[  656.022121][ T3376]  ? __pfx___schedule+0x10/0x10
[  656.022143][ T3376]  ? ieee80211_inform_bss+0xc79/0x1180
[  656.022193][ T3376]  ? preempt_schedule_common+0x7f/0xd0
[  656.022218][ T3376]  ? cfg80211_inform_single_bss_data+0x1398/0x1df0
[  656.022253][ T3376]  ? rcu_is_watching+0x16/0xb0
[  656.022275][ T3376]  ? trace_cfg80211_return_bss+0x7c/0x1f0
[  656.022307][ T3376]  ? cfg80211_inform_single_bss_data+0x13a0/0x1df0
[  656.022350][ T3376]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  656.022402][ T3376]  ? __lock_acquire+0x747/0x2de0
[  656.022439][ T3376]  ? __lock_acquire+0x747/0x2de0
[  656.022481][ T3376]  ? __lock_acquire+0x747/0x2de0
[  656.022542][ T3376]  ? lock_acquire+0x115/0x350
[  656.022573][ T3376]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  656.022608][ T3376]  do_writepages+0x338/0x560
[  656.022633][ T3376]  ? ktime_get+0x45/0x220
[  656.022669][ T3376]  ? reacquire_held_locks+0x117/0x1a0
[  656.022700][ T3376]  ? writeback_sb_inodes+0x450/0x1af0
[  656.022735][ T3376]  __writeback_single_inode+0x136/0x1220
[  656.022767][ T3376]  ? do_raw_spin_unlock+0xf5/0x200
[  656.022797][ T3376]  writeback_sb_inodes+0x9de/0x1af0
[  656.022824][ T3376]  ? __lock_acquire+0x747/0x2de0
[  656.022860][ T3376]  ? lock_acquire+0x115/0x350
[  656.022907][ T3376]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  656.022987][ T3376]  ? rcu_is_watching+0x16/0xb0
[  656.023011][ T3376]  ? queue_io+0x2d3/0x470
[  656.023043][ T3376]  wb_writeback+0x41c/0xad0
[  656.023075][ T3376]  ? queue_io+0x221/0x470
[  656.023111][ T3376]  ? __pfx_wb_writeback+0x10/0x10
[  656.023137][ T3376]  ? do_raw_spin_lock+0x12b/0x2f0
[  656.023181][ T3376]  wb_workfn+0x431/0x10f0
[  656.023229][ T3376]  ? __pfx_wb_workfn+0x10/0x10
[  656.023260][ T3376]  ? trace_hrtimer_start+0x82/0x200
[  656.023295][ T3376]  ? do_raw_spin_lock+0x12b/0x2f0
[  656.023332][ T3376]  ? lock_acquire+0x115/0x350
[  656.023372][ T3376]  ? rcu_is_watching+0x16/0xb0
[  656.023405][ T3376]  ? process_scheduled_works+0x97a/0x1630
[  656.023439][ T3376]  process_scheduled_works+0xc3d/0x1630
[  656.023529][ T3376]  ? __pfx_process_scheduled_works+0x10/0x10
[  656.023571][ T3376]  ? assign_work+0x3cf/0x5d0
[  656.023611][ T3376]  worker_thread+0xa47/0xfb0
[  656.023669][ T3376]  kthread+0x38b/0x480
[  656.023697][ T3376]  ? __pfx_worker_thread+0x10/0x10
[  656.023717][ T3376]  ? __pfx_kthread+0x10/0x10
[  656.023745][ T3376]  ret_from_fork+0x514/0xb70
[  656.023776][ T3376]  ? __pfx_ret_from_fork+0x10/0x10
[  656.023802][ T3376]  ? __switch_to+0xc78/0x1410
[  656.023828][ T3376]  ? __pfx_kthread+0x10/0x10
[  656.023857][ T3376]  ret_from_fork_asm+0x1a/0x30
[  656.023902][ T3376]  </TASK>
[  656.028883][ T3376] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  656.028968][ T3376] CPU: 0 UID: 0 PID: 3376 Comm: kworker/u8:12 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  656.028998][ T3376] Tainted: [L]=SOFTLOCKUP
[  656.029006][ T3376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  656.029020][ T3376] Workqueue: writeback wb_workfn (flush-7:1)
[  656.029054][ T3376] Call Trace:
[  656.029062][ T3376]  <TASK>
[  656.029072][ T3376]  dump_stack_lvl+0xe8/0x150
[  656.029109][ T3376]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  656.029144][ T3376]  f2fs_write_end_bio+0xf7d/0x1310
[  656.029187][ T3376]  __submit_merged_bio+0x258/0x6a0
[  656.029214][ T3376]  ? rcu_is_watching+0x16/0xb0
[  656.029243][ T3376]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  656.029280][ T3376]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  656.029336][ T3376]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  656.029362][ T3376]  ? lock_acquire+0x115/0x350
[  656.029431][ T3376]  ? clockevents_program_event+0x491/0x630
[  656.029463][ T3376]  ? __pfx_clockevents_program_event+0x10/0x10
[  656.029501][ T3376]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  656.029543][ T3376]  ? __schedule+0x1bbb/0x5f70
[  656.029601][ T3376]  ? __pfx___schedule+0x10/0x10
[  656.029623][ T3376]  ? ieee80211_inform_bss+0xc79/0x1180
[  656.029669][ T3376]  ? preempt_schedule_common+0x7f/0xd0
[  656.029694][ T3376]  ? cfg80211_inform_single_bss_data+0x1398/0x1df0
[  656.029729][ T3376]  ? rcu_is_watching+0x16/0xb0
[  656.029751][ T3376]  ? trace_cfg80211_return_bss+0x7c/0x1f0
[  656.029782][ T3376]  ? cfg80211_inform_single_bss_data+0x13a0/0x1df0
[  656.029823][ T3376]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  656.029865][ T3376]  ? __lock_acquire+0x747/0x2de0
[  656.029899][ T3376]  ? __lock_acquire+0x747/0x2de0
[  656.029941][ T3376]  ? __lock_acquire+0x747/0x2de0
[  656.030002][ T3376]  ? lock_acquire+0x115/0x350
[  656.030033][ T3376]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  656.030068][ T3376]  do_writepages+0x338/0x560
[  656.030093][ T3376]  ? ktime_get+0x45/0x220
[  656.030128][ T3376]  ? reacquire_held_locks+0x117/0x1a0
[  656.030159][ T3376]  ? writeback_sb_inodes+0x450/0x1af0
[  656.030194][ T3376]  __writeback_single_inode+0x136/0x1220
[  656.030228][ T3376]  ? do_raw_spin_unlock+0xf5/0x200
[  656.030258][ T3376]  writeback_sb_inodes+0x9de/0x1af0
[  656.030285][ T3376]  ? __lock_acquire+0x747/0x2de0
[  656.030321][ T3376]  ? lock_acquire+0x115/0x350
[  656.030369][ T3376]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  656.030456][ T3376]  ? rcu_is_watching+0x16/0xb0
[  656.030479][ T3376]  ? queue_io+0x2d3/0x470
[  656.030511][ T3376]  wb_writeback+0x41c/0xad0
[  656.030543][ T3376]  ? queue_io+0x221/0x470
[  656.030578][ T3376]  ? __pfx_wb_writeback+0x10/0x10
[  656.030603][ T3376]  ? do_raw_spin_lock+0x12b/0x2f0
[  656.030648][ T3376]  wb_workfn+0x431/0x10f0
[  656.030694][ T3376]  ? __pfx_wb_workfn+0x10/0x10
[  656.030724][ T3376]  ? trace_hrtimer_start+0x82/0x200
[  656.030759][ T3376]  ? do_raw_spin_lock+0x12b/0x2f0
[  656.030795][ T3376]  ? lock_acquire+0x115/0x350
[  656.030834][ T3376]  ? rcu_is_watching+0x16/0xb0
[  656.030858][ T3376]  ? process_scheduled_works+0x97a/0x1630
[  656.030892][ T3376]  process_scheduled_works+0xc3d/0x1630
[  656.030961][ T3376]  ? __pfx_process_scheduled_works+0x10/0x10
[  656.031001][ T3376]  ? assign_work+0x3cf/0x5d0
[  656.031041][ T3376]  worker_thread+0xa47/0xfb0
[  656.031097][ T3376]  kthread+0x38b/0x480
[  656.031125][ T3376]  ? __pfx_worker_thread+0x10/0x10
[  656.031144][ T3376]  ? __pfx_kthread+0x10/0x10
[  656.031172][ T3376]  ret_from_fork+0x514/0xb70
[  656.031202][ T3376]  ? __pfx_ret_from_fork+0x10/0x10
[  656.031226][ T3376]  ? __switch_to+0xc78/0x1410
[  656.031251][ T3376]  ? __pfx_kthread+0x10/0x10
[  656.031279][ T3376]  ret_from_fork_asm+0x1a/0x30
[  656.031319][ T3376]  </TASK>
[  656.037073][ T3376] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  656.137178][T21785] loop5: detected capacity change from 0 to 1024
[  656.471677][T21787] hfsplus: invalid length 1280 has been corrected to 255
[  656.518998][T21787] hfsplus: invalid length 1280 has been corrected to 255
[  656.913945][T21773] loop9: detected capacity change from 0 to 32768
[  656.985004][T21773] JBD2: Ignoring recovery information on journal
[  657.018347][T21773] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  657.320750][T21797] loop6: detected capacity change from 0 to 256
[  657.325862][T21797] exfat: Deprecated parameter 'namecase'
[  657.326020][T21797] exfat: Deprecated parameter 'namecase'
[  657.447023][T21797] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d)
[  657.539147][T17879] ocfs2: Unmounting device (7,9) on (node local)
[  658.176356][T21819] loop4: detected capacity change from 0 to 2048
[  658.255593][T21819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  658.315888][   T34] audit: type=1800 audit(1794369306.542:277): pid=21819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6113" name="file1" dev="loop4" ino=15 res=0 errno=-22
[  658.479503][T21830] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6116'.
[  658.599415][T21834] loop1: detected capacity change from 0 to 64
[  658.771778][T21837] loop6: detected capacity change from 0 to 256
[  658.844100][T21837] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fcb6, chksum : 0x64b32e36, utbl_chksum : 0xe619d30d)
[  658.937364][T21838] loop5: detected capacity change from 0 to 4096
[  658.984280][ T5651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.048335][T21839] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  659.175595][T21843] syzkaller1: tun_chr_ioctl cmd 1074025672
[  659.175622][T21843] syzkaller1: ignored: set checksum enabled
[  660.060619][T21884] <
[  660.099698][T21886] loop1: detected capacity change from 0 to 256
[  660.176180][T21886] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  660.221359][T21890] loop5: detected capacity change from 0 to 8
[  660.330944][T21890] SQUASHFS error: Unable to read inode 0x24
[  660.546414][T21892] loop4: detected capacity change from 0 to 4096
[  660.588220][T21900] netlink: 'syz.5.6148': attribute type 12 has an invalid length.
[  660.588248][T21900] netlink: 'syz.5.6148': attribute type 29 has an invalid length.
[  660.588262][T21900] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6148'.
[  660.645480][T21892] ntfs3(loop4): Failed to load $Extend (-22).
[  660.645522][T21892] ntfs3(loop4): Failed to initialize $Extend.
[  660.761750][T21904] ieee802154 phy0 wpan0: encryption failed: -22
[  661.190687][ T5779] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  661.199677][T21895] loop9: detected capacity change from 0 to 32768
[  661.264635][T21895] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  661.329673][T21895] XFS (loop9): Ending clean mount
[  661.338342][ T5779] usb 6-1: New USB device found: idVendor=1ae7, idProduct=9001, bcdDevice=0.00
[  661.339484][ T5779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  661.339526][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.364156][ T5779] usb 6-1: config 0 descriptor??
[  661.383862][T21895] XFS (loop9): Quotacheck needed: Please wait.
[  661.440768][T21928] block2mtd: error: cannot open device 
[  661.595623][T21895] XFS (loop9): Quotacheck: Done.
[  661.868540][ T5779] speedlink 0003:1AE7:9001.0031: hidraw0: USB HID v0.00 Device [HID 1ae7:9001] on usb-dummy_hcd.5-1/input0
[  662.061427][T21932] ntfs3(loop6): Failed to load $Extend (-22).
[  662.061458][T21932] ntfs3(loop6): Failed to initialize $Extend.
[  662.096931][T14544] usb 6-1: USB disconnect, device number 17
[  662.120293][T21937] fido_id[21937]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  662.266712][T17879] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  662.279525][T21932] ntfs3(loop6): ino=5, "/" mi_enum_attr
[  662.556108][T21944] set_capacity_and_notify: 1 callbacks suppressed
[  662.556131][T21944] loop4: detected capacity change from 0 to 256
[  662.559749][T21944] exfat: Deprecated parameter 'utf8'
[  662.559776][T21944] exfat: Deprecated parameter 'utf8'
[  662.559863][T21944] exfat: Deprecated parameter 'utf8'
[  662.574858][T21944] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  662.829657][T21952] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  662.917716][T21954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6169'.
[  663.764595][T21983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6181'.
[  663.764627][T21983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6181'.
[  663.815417][T21961] loop1: detected capacity change from 0 to 32768
[  663.921328][T21989] loop4: detected capacity change from 0 to 1024
[  663.943545][T21989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  664.001184][T21994] loop6: detected capacity change from 0 to 128
[  664.006536][T21994] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  664.025961][T21994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  664.179180][   T34] audit: type=1400 audit(1794369312.412:278): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=21997 comm="syz.1.6187"
[  664.254255][ T5651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  664.504942][   T34] audit: type=1326 audit(1794369312.732:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22005 comm="syz.1.6192" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  664.506580][   T34] audit: type=1326 audit(1794369312.732:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22005 comm="syz.1.6192" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  664.517527][   T34] audit: type=1326 audit(1794369312.742:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22005 comm="syz.1.6192" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  664.517924][   T34] audit: type=1326 audit(1794369312.752:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22005 comm="syz.1.6192" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  664.517969][   T34] audit: type=1326 audit(1794369312.752:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22005 comm="syz.1.6192" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  664.525799][   T34] audit: type=1326 audit(1794369312.752:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22005 comm="syz.1.6192" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  664.525851][   T34] audit: type=1326 audit(1794369312.752:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22005 comm="syz.1.6192" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  664.525892][   T34] audit: type=1326 audit(1794369312.752:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22005 comm="syz.1.6192" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  664.526705][   T34] audit: type=1326 audit(1794369312.752:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22005 comm="syz.1.6192" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f60a7fa8f19 code=0x7ffc0000
[  664.799984][T22008] 8021q: adding VLAN 0 to HW filter on device bond1
[  664.836749][T22013] loop1: detected capacity change from 0 to 1024
[  664.891779][T22013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  664.891901][T22013] ext4 filesystem being mounted at /1312/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  665.013139][T22017] loop5: detected capacity change from 0 to 2048
[  665.087799][T22017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  665.227833][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  665.496273][T22033] input: syz0 as /devices/virtual/input/input35
[  665.667813][ T5747] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  665.817511][ T5747] usb 10-1: Using ep0 maxpacket: 32
[  665.818285][ T5747] usb 10-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  665.819559][ T5747] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.822977][ T5747] usb 10-1: config 0 descriptor??
[  666.033767][ T5747] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  666.045857][ T5747] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  666.047011][ T5747] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  666.047072][ T5747] usb 10-1: media controller created
[  666.097181][ T5747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  666.240414][ T5747] az6027: usb out operation failed. (-71)
[  666.240844][ T5747] az6027: usb out operation failed. (-71)
[  666.240859][ T5747] stb0899_attach: Driver disabled by Kconfig
[  666.240870][ T5747] az6027: no front-end attached
[  666.240870][ T5747] 
[  666.241261][ T5747] az6027: usb out operation failed. (-71)
[  666.241275][ T5747] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  666.273454][ T5747] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input36
[  666.370032][ T5747] dvb-usb: schedule remote query interval to 400 msecs.
[  666.370061][ T5747] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  666.404802][ T5747] usb 10-1: USB disconnect, device number 11
[  666.524363][ T5747] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  666.810962][T22071] loop4: detected capacity change from 0 to 512
[  666.885535][T22071] EXT4-fs error (device loop4) in ext4_process_orphan:346: Out of memory
[  666.885568][T22071] loop4: lost filesystem error report for type 5 error -12
[  666.887468][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  666.887493][    C0] EXT4-fs (loop4): initial error at time 1794369315: ext4_process_orphan:346
[  666.887520][    C0] EXT4-fs (loop4): last error at time 1794369315: ext4_process_orphan:346
[  666.943498][T22071] EXT4-fs (loop4): 2 truncates cleaned up
[  666.950951][T22071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  666.983356][T22071] EXT4-fs (loop4): Online defrag not supported for non-extent files
[  667.082081][ T5651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.200896][T22084] loop4: detected capacity change from 0 to 1024
[  667.218996][T22086] loop6: detected capacity change from 0 to 1024
[  667.257516][ T5779] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  667.318257][T22084] hfsplus: xattr search failed
[  667.323604][T22087] hfsplus: xattr search failed
[  667.418579][ T5779] usb 10-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  667.418630][ T5779] usb 10-1: too many configurations: 9, using maximum allowed: 8
[  667.419844][ T5779] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.420033][ T5779] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.420065][ T5779] usb 10-1: config 0 interface 0 has no altsetting 0
[  667.421169][ T5779] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.421217][ T5779] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.421244][ T5779] usb 10-1: config 0 interface 0 has no altsetting 0
[  667.423006][ T5779] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.423056][ T5779] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.423084][ T5779] usb 10-1: config 0 interface 0 has no altsetting 0
[  667.425504][ T5779] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.425555][ T5779] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.425582][ T5779] usb 10-1: config 0 interface 0 has no altsetting 0
[  667.426701][ T5779] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.426760][ T5779] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.426788][ T5779] usb 10-1: config 0 interface 0 has no altsetting 0
[  667.542216][ T5779] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.542279][ T5779] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.542309][ T5779] usb 10-1: config 0 interface 0 has no altsetting 0
[  667.581535][ T5779] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.581594][ T5779] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.581623][ T5779] usb 10-1: config 0 interface 0 has no altsetting 0
[  667.618576][ T5779] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.618904][ T5779] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.618933][ T5779] usb 10-1: config 0 interface 0 has no altsetting 0
[  667.678455][ T5779] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  667.678488][ T5779] usb 10-1: Product: syz
[  667.678504][ T5779] usb 10-1: Manufacturer: syz
[  667.678519][ T5779] usb 10-1: SerialNumber: syz
[  667.686285][ T5779] usb 10-1: config 0 descriptor??
[  667.736943][ T5779] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0
[  667.952961][ T5779] usb 10-1: USB disconnect, device number 12
[  667.964986][ T5779] yurex 10-1:0.0: USB YUREX #0 now disconnected
[  668.149468][T22111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6237'.
[  668.418243][ T5645] Bluetooth: hci5: command 0x1003 tx timeout
[  668.418352][ T4957] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  668.648862][T22127] loop1: detected capacity change from 0 to 512
[  668.651153][T22127] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  668.688065][T22127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  668.688185][T22127] ext4 filesystem being mounted at /1317/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  668.816603][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  669.054239][T22142] can0: slcan on ttyS3.
[  669.208295][T22149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6253'.
[  669.270195][T22142] can0 (unregistered): slcan off ttyS3.
[  669.323027][T22154] netlink: 'syz.5.6258': attribute type 11 has an invalid length.
[  669.637575][   T33] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  669.717548][ T5768] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  669.798819][   T33] usb 2-1: Using ep0 maxpacket: 32
[  669.802204][   T33] usb 2-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  669.811256][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.811282][   T33] usb 2-1: Product: syz
[  669.811296][   T33] usb 2-1: Manufacturer: syz
[  669.811336][   T33] usb 2-1: SerialNumber: syz
[  669.816161][   T33] usb 2-1: config 0 descriptor??
[  669.828118][   T33] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  669.828231][   T33] dvb-usb: bulk message failed: -22 (4/0)
[  669.828245][   T33] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  669.830666][   T33] dvb-usb: bulk message failed: -22 (5/0)
[  669.830684][   T33] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  669.836710][   T33] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  669.841171][   T33] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  669.842966][   T33] usb 2-1: media controller created
[  669.882531][ T5768] usb 10-1: Using ep0 maxpacket: 32
[  669.888256][ T5768] usb 10-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  669.891377][ T5768] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.899255][ T5768] usb 10-1: config 0 descriptor??
[  669.915047][   T33] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  669.985757][   T33] usb 2-1: selecting invalid altsetting 3
[  669.985784][   T33] ttusb2: set interface to alts=3 failed
[  670.049936][T22156] dvb-usb: bulk message failed: -22 (7/0)
[  670.049964][T22156] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  670.050014][T22156] ttusb2: i2c transfer failed.
[  670.115857][ T5768] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  670.131263][ T5768] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  670.133937][ T5768] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  670.133997][ T5768] usb 10-1: media controller created
[  670.151383][   T33] DVB: Unable to find symbol tda10086_attach()
[  670.151399][   T33] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  670.156224][   T33] dvb-usb: bulk message failed: -22 (4/0)
[  670.156242][   T33] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  670.156370][   T33] dvb-usb: bulk message failed: -22 (5/0)
[  670.156383][   T33] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  670.156452][   T33] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  670.174703][   T33] usb 2-1: USB disconnect, device number 27
[  670.215329][ T5768] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  670.336701][T22160] dvb-usb: bulk message failed: -22 (8/0)
[  670.336727][T22160] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  670.336804][T22160] ttusb2: i2c transfer failed.
[  670.351432][ T5768] az6027: usb out operation failed. (-71)
[  670.353323][ T5768] az6027: usb out operation failed. (-71)
[  670.353338][ T5768] stb0899_attach: Driver disabled by Kconfig
[  670.353347][ T5768] az6027: no front-end attached
[  670.353347][ T5768] 
[  670.353726][ T5768] az6027: usb out operation failed. (-71)
[  670.353741][ T5768] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  670.363387][   T33] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  670.374094][ T5768] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input37
[  670.443995][ T5768] dvb-usb: schedule remote query interval to 400 msecs.
[  670.444022][ T5768] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  670.461405][ T5768] usb 10-1: USB disconnect, device number 13
[  670.645642][ T5768] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  670.713395][T22175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x733a instead
[  670.713426][T22175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x3a31 instead
[  670.713444][T22175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x3030 instead
[  670.713461][T22175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x3030 instead
[  670.713478][T22175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x3030 instead
[  670.713495][T22175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x3030 instead
[  670.713512][T22175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3336 instead
[  670.713529][T22175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x663a instead
[  670.713546][T22175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x0033 instead
[  670.713564][T22175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x23aa instead
[  670.713580][T22175] jffs2: Further such events for this erase block will not be printed
[  670.713669][T22175] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  670.713679][T22175] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[  670.759988][T22177] loop5: detected capacity change from 0 to 136
[  671.162581][T22185] loop5: detected capacity change from 0 to 256
[  671.275056][T22189] program syz.1.6272 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  671.563350][T22194] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  672.006945][   T34] kauditd_printk_skb: 3 callbacks suppressed
[  672.006968][   T34] audit: type=1400 audit(1794369320.232:291): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="f/o" pid=22201 comm="syz.5.6278" name="f/o" offset=66
[  685.693041][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  685.693112][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  695.927858][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  728.734604][ T4957] Bluetooth: hci1: command 0x0406 tx timeout
[  734.752243][ T5006] udevd[5006]: worker [15478] /devices/pci0000:00/0000:00:03.0/virtio0/host0/target0:0:1/0:0:1:0/block/sda is taking a long time
[  747.129766][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  747.129835][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  808.569553][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  808.569621][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  814.972885][   T37] INFO: task kworker/u8:9:1171 blocked in I/O wait fo
** replaying previous printk message **
[  814.972885][   T37] INFO: task kworker/u8:9:1171 blocked in I/O wait for more than 143 seconds.
[  814.972921][   T37]       Tainted: G             L      syzkaller #0
[  814.972934][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  814.972945][   T37] task:kworker/u8:9    state:D stack:21544 pid:1171  tgid:1171  ppid:2      task_flags:0x4248060 flags:0x00080000
[  814.973008][   T37] Workqueue: writeback wb_workfn (flush-8:0)
[  814.973059][   T37] Call Trace:
[  814.973067][   T37]  <TASK>
[  814.973084][   T37]  __schedule+0x1ba5/0x5f70
[  814.973131][   T37]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  814.973266][   T37]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  814.973302][   T37]  ? __blk_flush_plug+0x416/0x4d0
[  814.973366][   T37]  ? __pfx___schedule+0x10/0x10
[  814.973405][   T37]  ? schedule+0x90/0x2b0
[  814.973434][   T37]  schedule+0x164/0x2b0
[  814.973463][   T37]  io_schedule+0x7f/0xd0
[  814.973491][   T37]  bit_wait_io+0x13/0x110
[  814.973521][   T37]  __wait_on_bit_lock+0xc9/0x5a0
[  814.973553][   T37]  ? __pfx_bit_wait_io+0x10/0x10
[  814.973583][   T37]  out_of_line_wait_on_bit_lock+0x13b/0x190
[  814.973613][   T37]  ? __pfx_bit_wait_io+0x10/0x10
[  814.973639][   T37]  ? __pfx_out_of_line_wait_on_bit_lock+0x10/0x10
[  814.973672][   T37]  ? __pfx_wake_bit_function+0x10/0x10
[  814.973710][   T37]  do_get_write_access+0x1b7/0x10c0
[  814.973827][   T37]  jbd2_journal_get_write_access+0x1d7/0x230
[  814.973865][   T37]  __ext4_journal_get_write_access+0xec/0x620
[  814.973932][   T37]  ? ext4_get_group_desc+0x10e/0x4e0
[  814.973999][   T37]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  814.974039][   T37]  ? ext4_get_group_desc+0x10e/0x4e0
[  814.974081][   T37]  ext4_mb_mark_context+0x325/0xec0
[  814.974156][   T37]  ? __pfx_ext4_mb_mark_context+0x10/0x10
[  814.974189][   T37]  ? ext4_sb_block_valid+0x16d/0x560
[  814.974218][   T37]  ? ext4_sb_block_valid+0x484/0x560
[  814.974245][   T37]  ext4_mb_mark_diskspace_used+0x338/0x760
[  814.974291][   T37]  ext4_mb_new_blocks+0x1062/0x4520
[  814.974327][   T37]  ? trace_kmalloc+0x2a/0xf0
[  814.974365][   T37]  ? ext4_ext_search_right+0x39a/0x860
[  814.974394][   T37]  ? __asan_memcpy+0x40/0x70
[  814.974426][   T37]  ? __pfx_ext4_mb_new_blocks+0x10/0x10
[  814.974458][   T37]  ? ext4_ext_find_goal+0xf0/0x1e0
[  814.974490][   T37]  ext4_ext_map_blocks+0x1427/0x5480
[  814.974541][   T37]  ? stack_trace_save+0xa9/0x100
[  814.974583][   T37]  ? ext4_alloc_io_end_vec+0x2b/0x160
[  814.974628][   T37]  ? kmem_cache_alloc_noprof+0x131/0x600
[  814.974656][   T37]  ? stack_depot_save_flags+0x33/0x840
[  814.974737][   T37]  ? __pfx_ext4_ext_map_blocks+0x10/0x10
[  814.974795][   T37]  ? down_write+0x166/0x200
[  814.974830][   T37]  ext4_map_create_blocks+0x116/0x530
[  814.974902][   T37]  ? ext4_fc_track_inode+0xf3/0x3f0
[  814.974943][   T37]  ext4_map_blocks+0xe8e/0x1c60
[  814.975001][   T37]  ? __pfx_ext4_map_blocks+0x10/0x10
[  814.975038][   T37]  ? kmem_cache_alloc_noprof+0x151/0x600
[  814.975078][   T37]  ? ext4_inode_journal_mode+0x3d6/0x4d0
[  814.975107][   T37]  ext4_do_writepages+0x1978/0x44a0
[  814.975190][   T37]  ? __pfx_ext4_do_writepages+0x10/0x10
[  814.975213][   T37]  ? __lock_acquire+0x747/0x2de0
[  814.975249][   T37]  ? filemap_get_folios_tag+0x639/0x720
[  814.975287][   T37]  ? filemap_get_folios_tag+0x118/0x720
[  814.975320][   T37]  ? __pfx_filemap_get_folios_tag+0x10/0x10
[  814.975359][   T37]  ? lock_acquire+0x115/0x350
[  814.975414][   T37]  ext4_writepages+0x1fe/0x4e0
[  814.975447][   T37]  ? __pfx_ext4_writepages+0x10/0x10
[  814.975496][   T37]  ? do_raw_spin_unlock+0xf5/0x200
[  814.975521][   T37]  ? __pfx_ext4_writepages+0x10/0x10
[  814.975549][   T37]  do_writepages+0x338/0x560
[  814.975574][   T37]  ? do_raw_spin_lock+0x12b/0x2f0
[  814.975604][   T37]  ? reacquire_held_locks+0x117/0x1a0
[  814.975634][   T37]  ? writeback_sb_inodes+0x450/0x1af0
[  814.975668][   T37]  __writeback_single_inode+0x136/0x1220
[  814.975702][   T37]  ? do_raw_spin_unlock+0xf5/0x200
[  814.975732][   T37]  writeback_sb_inodes+0x9de/0x1af0
[  814.975789][   T37]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  814.975862][   T37]  ? __pfx_down_read_trylock+0x10/0x10
[  814.975886][   T37]  ? __pfx___up_read+0x10/0x10
[  814.975923][   T37]  __writeback_inodes_wb+0x114/0x250
[  814.975962][   T37]  wb_writeback+0x42f/0xad0
[  814.975993][   T37]  ? queue_io+0x221/0x470
[  814.976036][   T37]  ? __pfx_wb_writeback+0x10/0x10
[  814.976062][   T37]  ? do_raw_spin_lock+0x12b/0x2f0
[  814.976107][   T37]  wb_workfn+0xc92/0x10f0
[  814.976154][   T37]  ? __pfx_wb_workfn+0x10/0x10
[  814.976183][   T37]  ? lockdep_hardirqs_on+0x7b/0x110
[  814.976220][   T37]  ? do_raw_spin_lock+0x12b/0x2f0
[  814.976255][   T37]  ? lock_acquire+0x115/0x350
[  814.976295][   T37]  ? rcu_is_watching+0x16/0xb0
[  814.976320][   T37]  ? process_scheduled_works+0x97a/0x1630
[  814.976357][   T37]  process_scheduled_works+0xc3d/0x1630
[  814.976429][   T37]  ? __pfx_process_scheduled_works+0x10/0x10
[  814.976470][   T37]  ? assign_work+0x3cf/0x5d0
[  814.976509][   T37]  worker_thread+0xa47/0xfb0
[  814.976565][   T37]  kthread+0x38b/0x480
[  814.976593][   T37]  ? __pfx_worker_thread+0x10/0x10
[  814.976613][   T37]  ? __pfx_kthread+0x10/0x10
[  814.976642][   T37]  ret_from_fork+0x514/0xb70
[  814.976674][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[  814.976700][   T37]  ? __switch_to+0xc78/0x1410
[  814.976726][   T37]  ? __pfx_kthread+0x10/0x10
[  814.976755][   T37]  ret_from_fork_asm+0x1a/0x30
[  814.976801][   T37]  </TASK>
[  814.976934][   T37] 
[  814.976934][   T37] Showing all locks held in the system:
[  814.976946][   T37] locks held by khungtaskd/37: 1, on CPU#0:
[  814.976963][   T37]  #0: ffffffff9015ad60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  814.977058][   T37] locks held by kworker/u8:9/1171: 6, last CPU#1:
[  814.977075][   T37]  #0: ffff888021ec5150 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  814.977138][   T37]  #1: ffffc9000522fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  814.977199][   T37]  #2: ffff88807f956100 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  814.977290][   T37]  #3: ffff88807f898cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0
[  814.979097][   T37]  #4: ffff88803703c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  814.979153][   T37]  #5: ffff888077625cb8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0xacb/0x1c60
[  814.979223][   T37] locks held by klogd/4995: 1, on CPU#0:
[  814.979237][   T37]  #0: ffffffff902b6430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  814.979291][   T37] locks held by getty/5396: 2, last CPU#1:
[  814.979304][   T37]  #0: ffff88803737e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  814.979406][   T37]  #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  814.979481][   T37] locks held by syz-executor/5628: 2, last CPU#1:
[  814.979495][   T37]  #0: ffff888033ce31c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  814.979542][   T37]  #1: ffff88807f956570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  814.979605][   T37] locks held by kworker/1:0/14384: 2, on CPU#1:
[  814.979619][   T37]  #0: ffff88813fe15d50 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  814.979675][   T37]  #1: ffffc90003f27c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  814.979734][   T37] locks held by syz.9.6279/22206: 2, last CPU#1:
[  814.979749][   T37]  #0: ffff88802b7acbc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  814.979795][   T37]  #1: ffff88807f956570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  814.979844][   T37] locks held by syz.6.6281/22208: 2, last CPU#0:
[  814.979858][   T37]  #0: ffff88807a647180 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520
[  814.979908][   T37]  #1: ffff88807f956478 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  814.979970][   T37] 
[  814.979976][   T37] =============================================
[  814.979976][   T37] 
[  814.979985][   T37] NMI backtrace for cpu 0
[  814.980001][   T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  814.980033][   T37] Tainted: [L]=SOFTLOCKUP
[  814.980041][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  814.980052][   T37] Call Trace:
[  814.980061][   T37]  <TASK>
[  814.980069][   T37]  dump_stack_lvl+0xe8/0x150
[  814.980100][   T37]  nmi_cpu_backtrace+0x274/0x2d0
[  814.980152][   T37]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  814.980179][   T37]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  814.980203][   T37]  sys_info+0x135/0x170
[  814.980229][   T37]  watchdog+0x1073/0x10f0
[  814.980266][   T37]  ? watchdog+0x209/0x10f0
[  814.980300][   T37]  kthread+0x38b/0x480
[  814.980324][   T37]  ? __pfx_watchdog+0x10/0x10
[  814.980349][   T37]  ? __pfx_kthread+0x10/0x10
[  814.980373][   T37]  ret_from_fork+0x514/0xb70
[  814.980400][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[  814.980422][   T37]  ? __switch_to+0xc78/0x1410
[  814.980444][   T37]  ? __pfx_kthread+0x10/0x10
[  814.980468][   T37]  ret_from_fork_asm+0x1a/0x30
[  814.980504][   T37]  </TASK>
[  814.980512][   T37] Sending NMI from CPU 0 to CPUs 1:
[  814.980562][    C1] NMI backtrace for cpu 1
[  814.980580][    C1] CPU: 1 UID: 0 PID: 36 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  814.980605][    C1] Tainted: [L]=SOFTLOCKUP
[  814.980612][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  814.980623][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  814.980715][    C1] Code: e8 fe 30 3a fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bf 2d b8 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 82 87 06 cc 44 89 f9 80 e1 07
[  814.980731][    C1] RSP: 0018:ffffc90000ac78b8 EFLAGS: 00000002
[  814.980749][    C1] RAX: 1ffffffff3848300 RBX: 00000000000003fd RCX: 0000000000000000
[  814.980762][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  814.980774][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  814.980787][    C1] R10: dffffc0000000000 R11: ffffffff858f3d90 R12: dffffc0000000000
[  814.980801][    C1] R13: 0000000000000000 R14: ffffffff9c241fa0 R15: 0000000000000000
[  814.980813][    C1] FS:  0000000000000000(0000) GS:ffff8881234cd000(0000) knlGS:0000000000000000
[  814.980829][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  814.980842][    C1] CR2: 00005610ce014168 CR3: 000000000ff48000 CR4: 00000000003526f0
[  814.980861][    C1] Call Trace:
[  814.980868][    C1]  <TASK>
[  814.980877][    C1]  wait_for_lsr+0x184/0x2f0
[  814.980901][    C1]  __serial8250_console_fifo_write+0xcd/0x3e0
[  814.980932][    C1]  serial8250_console_write+0xa7e/0x1200
[  814.980959][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  814.980981][    C1]  ? rcu_is_watching+0x16/0xb0
[  814.981007][    C1]  nbcon_emit_next_record+0xef5/0x1a90
[  814.981040][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  814.981068][    C1]  ? nbcon_context_try_acquire+0x819/0xbd0
[  814.981101][    C1]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  814.981143][    C1]  nbcon_kthread_func+0x6d9/0x8d0
[  814.981171][    C1]  ? nbcon_kthread_func+0x163/0x8d0
[  814.981194][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  814.981221][    C1]  ? __kthread_parkme+0x71/0x1f0
[  814.981241][    C1]  ? __kthread_parkme+0x199/0x1f0
[  814.981263][    C1]  kthread+0x38b/0x480
[  814.981284][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  814.981307][    C1]  ? __pfx_kthread+0x10/0x10
[  814.981329][    C1]  ret_from_fork+0x514/0xb70
[  814.981351][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  814.981371][    C1]  ? __switch_to+0xc78/0x1410
[  814.981389][    C1]  ? __pfx_kthread+0x10/0x10
[  814.981411][    C1]  ret_from_fork_asm+0x1a/0x30
[  814.981438][    C1]  </TASK>
[  814.983142][   T37] Kernel panic - not syncing: hung_task: blocked tasks
[  816.125039][   T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  816.135725][   T37] Tainted: [L]=SOFTLOCKUP
[  816.140051][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  816.150112][   T37] Call Trace:
[  816.153404][   T37]  <TASK>
[  816.156338][   T37]  vpanic+0x26f/0x710
[  816.160424][   T37]  panic+0xc5/0xd0
[  816.164390][   T37]  ? __pfx_panic+0x10/0x10
[  816.169078][   T37]  ? preempt_schedule_common+0x7f/0xd0
[  816.174562][   T37]  ? preempt_schedule_thunk+0x16/0x40
[  816.179952][   T37]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  816.186139][   T37]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  816.192302][   T37]  watchdog+0x10e7/0x10f0
[  816.196651][   T37]  ? watchdog+0x209/0x10f0
[  816.201085][   T37]  kthread+0x38b/0x480
[  816.205165][   T37]  ? __pfx_watchdog+0x10/0x10
[  816.210032][   T37]  ? __pfx_kthread+0x10/0x10
[  816.214632][   T37]  ret_from_fork+0x514/0xb70
[  816.219232][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[  816.224352][   T37]  ? __switch_to+0xc78/0x1410
[  816.229036][   T37]  ? __pfx_kthread+0x10/0x10
[  816.233640][   T37]  ret_from_fork_asm+0x1a/0x30
[  816.238457][   T37]  </TASK>
[  816.241618][   T37] Kernel Offset: disabled
[  816.245951][   T37] Rebooting in 86400 seconds..